CVE-2026-6982: ShowDoc has an Injection vulnerability – CVSS 6.3 · Watchpost

← 脆弱性一覧

ShowDoc has an Injection vulnerability

中 6.3CVE-2026-6982 · GHSA-fm5r-cj7v-rj2c · 25/04/2026 公開 · 25/10/2026 更新

要点

CVE-2026-6982 は showdoc/showdoc に影響する深刻度「中」 (CVSS 6.3) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.24%（全脆弱性の 15.3% より高い）。
対処：3.8.1 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
showdoc/showdoc Packagist	`< 3.8.1`	`3.8.1`

概要

A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a manipulation of the argument pages can lead to sql injection. The attack may be launched remotely. Upgrading to version 3.8.1 addresses this issue. It is suggested to upgrade the affected component. According to the researcher, "[t]he vendor explicitly stated they will not backport patches to the older affected versions."

NVD の説明

A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a manipulation of the argument pages can lead to sql injection. The attack may be launched remotely. Upgrading to version 3.8.1 addresses this issue. It is suggested to upgrade the affected component. According to the researcher, "[t]he vendor explicitly stated they will not backport patches to the older affected versions."

参考情報

nvd.nist.gov/vuln/detail/CVE-2026-6982 · ADVISORY
gist.github.com/saDL0w/555e19668264f98d96259ad47ea33811 · WEB
star7th/showdoc · PACKAGE
star7th/showdoc release v3.8.1 · WEB
vuldb.com/submit/795528 · WEB
vuldb.com/vuln/359525 · WEB
vuldb.com/vuln/359525/cti · WEB

showdoc/showdoc のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン