SQL Injection

Every one of the 16 is a mark on the map. Named now: 1 to 16, most at risk first.

1. YesWiki < 4.6.4 - Unauthenticated SQL InjectionCVE-2026-46670YesWiki · CVSS 9.8 · 2.0% likely

   CWE-89

2. SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL commands via the "id" parameter.CVE-2018-13045Yeswiki · 3.2% likely

   CWE-89

3. An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.CVE-2021-43091Yeswiki · 1.4% likely

   CWE-89

4. YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)CVE-2026-52771YesWiki · CVSS 8.3 · 0.5% likely

   CWE-89

5. YesWiki Authenticated SQL Injection in ReactionManagerCVE-2026-52775YesWiki · CVSS 8.8 · 0.5% likely

   CWE-89

6. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in yeswiki/yeswikiCVE-2026-52770YesWiki · CVSS 7.5 · 0.5% likely

   CWE-89

7. YesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearchCVE-2026-104460YesWiki · CVSS 7.5 · 0.4% likely

   CWE-89

8. YesWiki: SQL injection via the `recentchanges` action `period` argument leading to arbitrary DB readCVE-2026-52763YesWiki · CVSS 6.5 · 0.4% likely

   CWE-89

9. YesWiki before 4.6.7 SQL Injection via filtertags filterN parameterCVE-2026-104457YesWiki · CVSS 8.6 · 0.4% likely

   CWE-89

10. YesWiki vulnerable to authenticated SQL Injection via id_fiche in EntryManager::formatDataBeforeSave()CVE-2026-41143YesWiki · CVSS 8.8 · 0.3% likely

    CWE-89

11. YesWiki before 4.6.7 SQL Injection via nuagetag tags parameterCVE-2026-104462YesWiki · CVSS 7.5 · 0.3% likely

    CWE-89

12. YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search APICVE-2026-116207YesWiki · CVSS 9.1 · 0.3% likely

    CWE-89

13. YesWiki before 4.6.7 Second-Order SQL Injection via ACL UsernameCVE-2026-104456YesWiki · CVSS 7.6 · 0.3% likely

    CWE-89

14. YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry createCVE-2026-116211YesWiki · CVSS 8.2 · 0.3% likely

    CWE-89

15. YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in UsernamesCVE-2026-116821YesWiki · CVSS 6.5 · 0.3% likely

    CWE-89

16. YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operandCVE-2026-116828YesWiki · CVSS 4.9 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.