SQL Injection in Yeswiki

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-43091 · ADVISORY
• yeswiki/yeswiki commit c9785f9 · WEB
• yeswiki/yeswiki · PACKAGE
• huntr.dev/bounties/07f245a7-ee9f-4b55-a0cc-13d5cb1be6e0 · WEB
• huntr.dev/bounties/07f245a7-ee9f-4b55-a0cc-13d5cb1be6e0 · Exploit

yeswiki/yeswiki のその他の脆弱性

• CVE-2026-104473中 6.1YesWiki before 4.5.3 contains multiple reflected cross-site scripting vulnerabilities that allow remote attackers to inject JavaScript throu…
• CVE-2026-52777緊急 9.4YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImport…
• CVE-2026-52775高 8.8YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki through the latest development branch contains a SQL injection vuln…
• CVE-2026-52774中 6.1YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler reflects the id GET parameter into HTML attr…
• CVE-2026-52773中 6.1YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWiki's archived-revision view reflects the time GET …