CyberRota Analysis
AI-GeneratedYesWiki versions prior to 4.6.7 are vulnerable to a blind SQL injection in the {{newtextsearch}} action, allowing anonymous attackers to exploit unescaped Bazar list option IDs. This vulnerability can lead to unauthorized access to sensitive database information, including admin password hashes. Organizations using affected versions should prioritize patching to mitigate the risk of data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the {{newtextsearch}} action because Bazar list option ids are concatenated into SQL REGEXP/LIKE clauses in actions/newtextsearch.php without escaping. Anonymous attackers can plant a malicious option id in an anonymously editable Bazar list and use search requests as a boolean oracle to read arbitrary database data, including admin password hashes from the yeswiki_users table.