PT-2026-54789

SQL Injection vulnerability in GoAdminGroup GoAdmin last release v1.2.26 allows a remote attacker to execute arbitrary code and obtain sensitive information via the the sort type URL parameter on all /admin/info/table endpoints...

CVE-2026-51946

A SQL Injection vulnerability exists in GoAdminGroup GoAdmin (last release v1.2.26 ). A remote attacker can exploit the ‘__sort_type“ URL parameter on all /admin/info/{table} endpoints to execute arbitrary code and obtain sensitive information. Exploitation details are not provided in the documen...