CVE-2026-46670

YesWiki is a wiki system written in PHP. Prior to version 4.6.4, an unauthenticated SQL injection in the Bazar form-import path FormManager::create allows any unauthenticated visitor of a default YesWiki install to inject arbitrary SQL into an INSERT statement and read the full database, includin...

CVE-2026-46670

YesWiki is a wiki system written in PHP. Prior to version 4.6.4, an unauthenticated SQL injection in the Bazar form-import path FormManager::create allows any unauthenticated visitor of a default YesWiki install to inject arbitrary SQL into an INSERT statement and read the full database, includin...

CVE-2026-46670 YesWiki: Unauthenticated SQL Injection

YesWiki is a wiki system written in PHP. Prior to version 4.6.4, an unauthenticated SQL injection in the Bazar form-import path FormManager::create allows any unauthenticated visitor of a default YesWiki install to inject arbitrary SQL into an INSERT statement and read the full database, includin...

CVE-2026-46670

YesWiki

SQL Injection

YesWiki is vulnerable to SQL Injection. The vulnerability is due to improper sanitization of user-supplied input in the Bazar form-import path FormManager::create, which allows an unauthenticated attacker to inject arbitrary SQL into an INSERT statement and read sensitive database contents,...

FormManager 安全漏洞

FormManager is a collection of data manipulation tools for form data by Kevin Dalman, an individual developer. A security vulnerability exists in FormManager version 0.7.4. An attacker exploited the vulnerability to run arbitrary code via the functions setDefaults, mergeBranch, and...

Cross-site Scripting (XSS)

typo3/cms-core is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization on the values of settings which are rendered through FormMananager/ViewModel.js...

CVE-2008-0648

Multiple PHP remote file inclusion vulnerabilities in OpenSiteAdmin 0.9.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 indexFooter.php; and 2 DatabaseManager.php, 3 FieldManager.php, 4 Filter.php, 5 Form.php, 6 FormManager.php, 7...

OpenSiteAdmin <= 0.9.1.1 Multiple File Inclusion Vulnerabilities

No description provided by source. Software Vulnerable: OpenSiteAdmin 0.9.1 BETA and maybe prior versions. Vulnerable Code: -OpenSiteAdmin/indexFooter.php requireonce$path."footer.php"; -OpenSiteAdmin/scripts/classes/DatabaseManager.php requireonce$path."OpenSiteAdmin/include.php";...

OpenSiteAdmin <= 0.9.1.1 Multiple File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ OpenSiteAdmin = 0.9.1.1 Multiple File Inclusion Vulnerabilities ================================================================ Software Vulnerable: OpenSiteAdmin 0.9.1 BETA...