Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a manipulation of the argument pages can lead to sql injection. The attack may be launched remotely. Upgrading to version 3.8.1 addresses this issue. It is suggested to upgrade the affected component. According to the researcher, "[t]he vendor explicitly stated they will not backport patches to the older affected versions."
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-6982 A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/A… https://www.cve.org/CVERecord?id=CVE-2026-6982
Post summary
The text cites CVE-2026-6982 and notes its impact on star7th ShowDoc versions, but provides no detailed technical information or evidence of exploitation.
CVE-2026-6982 SQL Injection in star7th ShowDoc API Page Sort Endpoint Versions Up to 3.8.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6982
Post summary
The text announces a SQL Injection flaw in the ShowDoc API Page Sort endpoint (versions ≤ 3.8.0), providing technical details but no evidence of exploitation, PoC, or patch.