Description
YesWiki是一个用PHP编写的wiki系统。系统存在SQL注入漏洞，攻击者可以获取数据库敏感信息
Yeswiki 存在SQL注入漏洞(CVE-2026-46670)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.endorlabs.com/vulnerability/cve-2026-46670
https://security.snyk.io/vuln/SNYK-PHP-YESWIKIYESWIKI-16875119
https://pentest-tools.com/vulnerabilities-exploits/yeswiki-464-unauthenticated-sql-injection_29344
https://github.com/advisories/GHSA-jwvv-qr7q-cv8j
https://vulert.com/vuln-db/CVE-2026-46670
https://ddpoc.com/DVB-2026-11283.html
https://s4e.io/tools/yeswiki-unauthenticated-sqli-cve-2026-46670