7 matches found
CVE-2026-52763: Improper Neutralization of Special Elements used in an SQL Command
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the recentchanges action actions/recentchanges.php accepts a period argument from two disjoint parameter spaces. A whitelist validates only the URL form against 'day','week','month'. The action-argument form takes the else branch wi...
6.5CVSS5.9AI score0.00379EPSS
SaveExploits0References3
20