# yeswiki

Published articles for yeswiki.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## CVE-2026-116211 - YesWiki 4.5.0 before 4.7.0 SQL Injection via date\_maj\_fiche in Bazar entry create

DevFeed: [CVE-2026-116211 - YesWiki 4.5.0 before 4.7.0 SQL Injection via date\_maj\_fiche in Bazar entry create](<https://devfeed.tech/articles/cve-2026-116211-yeswiki-4-5-0-before-4-7-0-sql-injection-via-date-maj-fiche-in-bazar-entry-create-99179.md>)

Original publisher: [Read original article](<https://cvefeed.io/vuln/detail/CVE-2026-116211>)

Author: CVEFEED.io; vulncheck.com

Published: 2026-10-25T14:17:02Z

Content type: news

Language: en

Sources: [Latest High/Critical Vulnerabilitiy Feed](<https://devfeed.tech/sources/latest-high-critical-vulnerabilitiy-feed.md>)

Topics: [SQL](<https://devfeed.tech/topics/sql.md>)

Tags: [cve-2026-116211](<https://devfeed.tech/tags/cve-2026-116211.md>), [sql-injection](<https://devfeed.tech/tags/sql-injection.md>), [yeswiki](<https://devfeed.tech/tags/yeswiki.md>)

### AI overview

YesWiki versions 4.5.0 through before 4.7.0 are reported vulnerable to SQL injection in PageManager::save() when creating a Bazar entry. The date_maj_fiche field is concatenated unescaped into an INSERT statement. The source says unauthenticated attackers on default installations can use a sub-SELECT against wiki_users to exfiltrate password hashes. The reported severity is 8.8 (HIGH).

### Source excerpt

CVE ID :CVE-2026-116211 Published : Oct. 25, 2026, 2:17 p.m. | 15 minutes ago Description :YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche field of a Bazar entry-creation request is concatenated unescaped into an INSERT statement. Unauthenticated attackers on default installs can inject a sub-SELECT against wiki_users to exfiltrate password hashes. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

## CVE-2026-116207 - YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API

DevFeed: [CVE-2026-116207 - YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API](<https://devfeed.tech/articles/cve-2026-116207-yeswiki-4-6-0-before-4-7-0-sql-injection-via-bazar-entries-search-api-99177.md>)

Original publisher: [Read original article](<https://cvefeed.io/vuln/detail/CVE-2026-116207>)

Author: CVEFEED.io; vulncheck.com

Published: 2026-10-25T14:17:01Z

Content type: news

Language: en

Sources: [Latest High/Critical Vulnerabilitiy Feed](<https://devfeed.tech/sources/latest-high-critical-vulnerabilitiy-feed.md>)

Topics: [SQL](<https://devfeed.tech/topics/sql.md>), [API](<https://devfeed.tech/topics/api.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [api](<https://devfeed.tech/tags/api.md>), [critical](<https://devfeed.tech/tags/critical.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-2026-116207](<https://devfeed.tech/tags/cve-2026-116207.md>), [entries](<https://devfeed.tech/tags/entries.md>), [search](<https://devfeed.tech/tags/search.md>), [search-api](<https://devfeed.tech/tags/search-api.md>), [sql](<https://devfeed.tech/tags/sql.md>), [sql-injection](<https://devfeed.tech/tags/sql-injection.md>), [yeswiki](<https://devfeed.tech/tags/yeswiki.md>)

### AI overview

YesWiki versions 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 have an unauthenticated SQL injection flaw in SearchManager::prepareSearchRequest(). The public Bazar entries search API places field names from its query and searchfields parameters into a backtick-quoted alias, escaping them only with mysqli_real_escape_string. A supplied backtick can enable subquery injection, which the source says could expose data such as user password hashes or exhaust database threads using SLEEP(). The excerpt rates the issue 9.1, Critical.

### Source excerpt

CVE ID :CVE-2026-116207 Published : Oct. 25, 2026, 2:17 p.m. | 15 minutes ago Description :YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest(). Field names from the query and searchfields parameters of the public Bazar entries search API are placed in a backtick-quoted alias escaped only with mysqli_real_escape_string. Attackers can supply a backtick to inject subqueries, reading data such as user password hashes or exhausting database threads with SLEEP(). Severity: 9.1 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...