16 matches found
CVE-2026-116170
SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injecting unescaped op and type=3 query values. Attackers can send crafted UNION SELECT payloads to searchHistory or getHistoryItems endpoints to exfiltrate deleted document content,...
CVE-2026-116170 SiYuan before v3.8.7 SQL Injection via History Search op and query
SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injecting unescaped op and type=3 query values. Attackers can send crafted UNION SELECT payloads to searchHistory or getHistoryItems endpoints to exfiltrate deleted document content,...
CVE-2026-116170 SiYuan before v3.8.7 SQL Injection via History Search op and query
SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injecting unescaped op and type=3 query values. Attackers can send crafted UNION SELECT payloads to searchHistory or getHistoryItems endpoints to exfiltrate deleted document content,...
EUVD-2026-109431
SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injecting unescaped op and type=3 query values. Attackers can send crafted UNION SELECT payloads to searchHistory or getHistoryItems endpoints to exfiltrate deleted document content,...
CVE-2026-116170 SiYuan before v3.8.7 SQL Injection via History Search op and query
SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injecting unescaped op and type=3 query values. Attackers can send crafted UNION SELECT payloads to searchHistory or getHistoryItems endpoints to exfiltrate deleted document content,...
CVE-2026-116170
SiYuan versions prior to v3.8.7 are vulnerable to a SQL Injection (CWE-89) vulnerability. The issue is caused by the failure to escape op and type=3 query values, allowing admin-token holders to execute crafted UNION SELECT payloads. This can occur via the searchHistory or getHistoryItems endpoin...
SiYuan SQL injection vulnerability
Versions prior to SiYuan 3.8.7 contain an SQL injection vulnerability. This flaw arises from the lack of escaping of the op and type=3 query values, enabling SQL injection. Users possessing administrator tokens can read the contents of history.db. Attackers can send specially crafted UNION SELECT...
PT-2026-123011
SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injecting unescaped op and type=3 query values. Attackers can send crafted UNION SELECT payloads to searchHistory or getHistoryItems endpoints to exfiltrate deleted document content,...
CVE-2024-53507
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems...
CVE-2024-53507
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems...
CVE-2024-53507
A SQL injection vulnerability exists in Siyuan version 3.1.11 specifically within the /getHistoryItems endpoint. This flaw allows for potential exploitation through the improper neutralization of special elements used in SQL commands. While no specific exploit details or in-the-wild incidents are...
CVE-2024-53507
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems...
SiYuan security vulnerabilities
SiYuan is a privacy-first personal knowledge management system from SiYuan Open Source. A security vulnerability exists in SiYuan version 3.1.11, which originates from the /getHistoryItems file containing a SQL injection vulnerability...
CVE-2024-53507
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems...
PT-2024-35767 · Siyuan · Siyuan
Name of the Vulnerable Software and Affected Versions: Siyuan version 3.1.11 Description: A SQL injection issue was found in the /getHistoryItems endpoint. This allows for potential exploitation through SQL injection attacks. No information is provided about the estimated number of affected devic...
