https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-29T10:24:20.106676+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-116820 fkie_cve-2026-116820 2026-10-29T10:24:20.125105+00:00

YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL queries by adding the showreq parameter. Attackers can append showreq to public Bazar listing API requests to obtain table names, JSON storage paths, ACL filter logic, and collation, aiding targeted SQL injection.

 https://db.gcve.eu/vuln/ghsa-9vjw-qm94-65hm GHSA-9vjw-qm94-65hm 2026-10-29T10:24:20.125167+00:00

YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL queries by adding the showreq parameter. Attackers can append showreq to public Bazar listing API requests to obtain table names, JSON storage paths, ACL filter logic, and collation, aiding targeted SQL injection.