12 matches found
POC-CVE-2026-65971
CVE-2026-65971 — SQL Injection in Livewire PowerGrid via sortDirection Proof-of-concept and full technical write-up for CVE-2026-65971 / GHSA-7fgc-3h6c-698r , an SQL injection in power-components/livewire-powergrid reachable through the public Livewire property sortDirection. | ---|--- CVE|...
CVE-2026-65971
Livewire PowerGrid creates data tables based on Laravel Livewire library. From version 6.0.0 to before version 6.10.4, the public Livewire property sortDirection is interpolated verbatim into a raw SQL ORDER BY clause and is not restricted to asc/desc, allowing arbitrary SQL injection through POS...
CVE-2026-65971
The livewire-powergrid package (versions >= 6.0.0,
CVE-2026-65971 Livewire PowerGrid: SQL Injection through the public `sortDirection` Livewire property in the `naturalSort` order-by path
Livewire PowerGrid creates data tables based on Laravel Livewire library. From version 6.0.0 to before version 6.10.4, the public Livewire property sortDirection is interpolated verbatim into a raw SQL ORDER BY clause and is not restricted to asc/desc, allowing arbitrary SQL injection through POS...
CVE-2026-65971 Livewire PowerGrid: SQL Injection through the public `sortDirection` Livewire property in the `naturalSort` order-by path
Livewire PowerGrid creates data tables based on Laravel Livewire library. From version 6.0.0 to before version 6.10.4, the public Livewire property sortDirection is interpolated verbatim into a raw SQL ORDER BY clause and is not restricted to asc/desc, allowing arbitrary SQL injection through POS...
CVE-2026-65971
Livewire PowerGrid creates data tables based on Laravel Livewire library. From version 6.0.0 to before version 6.10.4, the public Livewire property sortDirection is interpolated verbatim into a raw SQL ORDER BY clause and is not restricted to asc/desc, allowing arbitrary SQL injection through POS...
EUVD-2026-124050
Livewire PowerGrid creates data tables based on Laravel Livewire library. From version 6.0.0 to before version 6.10.4, the public Livewire property sortDirection is interpolated verbatim into a raw SQL ORDER BY clause and is not restricted to asc/desc, allowing arbitrary SQL injection through POS...
PT-2026-145525
Livewire PowerGrid creates data tables based on Laravel Livewire library. From version 6.0.0 to before version 6.10.4, the public Livewire property sortDirection is interpolated verbatim into a raw SQL ORDER BY clause and is not restricted to asc/desc, allowing arbitrary SQL injection through POS...
CVE-2026-65971: Power-Components livewire-powergrid: Livewire PowerGrid creates data tables based on Laravel Livewire library
Livewire PowerGrid creates data tables based on Laravel Livewire library. From version 6.0.0 to before version 6.10.4, the public Livewire property sortDirection is interpolated verbatim into a raw SQL ORDER BY clause and is not restricted to asc/desc, allowing arbitrary SQL injection through POS...
Livewire PowerGrid CVE-2026-65971 sortDirection SQLi
Confirms/exploits CVE-2026-65971: SQL injection in power-components/livewire-powergrid = 6.0.0, 0 else self.delay 0.6 self.baseline = 0.0 self.requests = 0 def calibrateself - bool: self.baseline, = self.module.update"", "asc" self.requests += 1 return self.true"1=1" and not self.true"1=2" def...
Livewire PowerGrid CVE-2026-65971 Detect
Detects CVE-2026-65971: time-based SQL injection via sortDirection in power-components/livewire-powergrid 6.10.4 when a column uses naturalSorttrue. Empty sortField bypasses Laravel direction validation. !/usr/bin/env python3 -- coding: utf-8 -- """Detect CVE-2026-65971 Livewire PowerGrid...
