CVE-2026-116211
Deferred Deferred - Pending Action

SQL Injection in YesWiki Prior to 4.7.0

Publication date: 2026-10-25

Last updated on: 2026-10-25

Assigner: VulnCheck

Description
YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche field of a Bazar entry-creation request is concatenated unescaped into an INSERT statement. Unauthenticated attackers on default installs can inject a sub-SELECT against wiki_users to exfiltrate password hashes.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-25
Last Modified
2026-10-25
Generated
2026-10-25
AI Q&A
2026-10-25
EPSS Evaluated
N/A
NVD
CVE-2026-116211
EUVD
EUVD-2026-109467

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
YesWiki yeswiki 4.5.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-116211 is a high-severity SQL injection vulnerability in YesWiki versions 4.5.0 to 4.6.9. It exists in the PageManager::save() function where the date_maj_fiche field is concatenated unescaped into an SQL INSERT statement. Attackers can inject malicious SQL code through this field to access or exfiltrate sensitive data like password hashes from the wiki_users table.

Detection Guidance

To detect this SQL injection vulnerability in YesWiki, inspect network traffic for POST requests to the Bazar entry creation endpoint containing the date_maj_fiche parameter. Check for unescaped SQL syntax in the parameter value. Use tools like Wireshark or tcpdump to capture and analyze HTTP requests. Additionally, review YesWiki logs for suspicious database queries or errors indicating SQL injection attempts.

Impact Analysis

Unauthenticated attackers can exploit this to read sensitive data such as password hashes from the wiki_users table. They may also perform unauthorized data access or modify database contents. The vulnerability allows both read and write operations depending on the injected SQL payload.

Compliance Impact

This vulnerability can lead to unauthorized access to sensitive personal data, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations using affected YesWiki versions risk non-compliance, potential fines, and reputational damage due to data breaches.

Mitigation Strategies

Immediately upgrade YesWiki to version 4.7.0 or later to patch the vulnerability. If upgrading is not possible, apply input validation to sanitize the date_maj_fiche parameter before it reaches the SQL query. Disable the Bazar entry creation feature if unused. Monitor database logs for unauthorized access attempts and restrict database user permissions to limit potential damage from SQL injection.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116211. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart