Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
YesWiki is a wiki system written in PHP. Prior to version 4.6.1, YesWiki bazar module contains a SQL injection vulnerability in tools/bazar/services/EntryManager.php at line 704. The $data['id_fiche'] value (sourced from $_POST['id_fiche']) is concatenated directly into a raw SQL query without any sanitization or parameterization. This issue has been patched in version 4.6.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-41143 YesWiki is a wiki system written in PHP. Prior to version 4.6.1, YesWiki bazar module contains a SQL injection vulnerability in tools/bazar/services/EntryManager.php … https://www.cve.org/CVERecord?id=CVE-2026-41143
Post summary
The snippet announces a SQL injection vulnerability in YesWiki’s bazar module, detailing the affected files and version, but does not provide PoC, exploit, or patch information.
⚠️ HIGH — CVE-2026-41143 YesWiki is a wiki system written in PHP. Prior to version 4.6.1, YesWiki bazar module contains a SQL injection vulnerab… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-41143 #HP #CyberSecurity #InfoSec
Post summary
A high‑severity SQL injection vulnerability (CVE‑2026‑41143) in the YesWiki bazar module (pre‑4.6.1) is disclosed with a CVSS score of 8.8, but no PoC, exploit, or patch information is provided.