CVE-2026-104460
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Oct 02, 2026
Vendor
unknown
Description
YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the { {newtextsearch} } action because Bazar list option ids are concatenated into SQL REGEXP/LIKE clauses in actions/newtextsearch.php without escaping. Anonymous attackers can plant a malicious option id in an anonymously editable Bazar list and use search requests as a boolean oracle to read arbitrary database data, including admin password hashes from the yeswiki_users table.