CVE-2026-19062: chiuwingyan house selectall.action sql injection
A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipulation of the argument zuname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19062?
CVE-2026-19062 has a high severity rating of 7.3.
What type of vulnerability is CVE-2026-19062?
CVE-2026-19062 is a SQL Injection vulnerability.
How do I fix CVE-2026-19062?
To fix CVE-2026-19062, update the chiuwingyan house software to a version that addresses this SQL injection flaw.
Can CVE-2026-19062 be exploited remotely?
Yes, CVE-2026-19062 can be exploited remotely by manipulating the zuname argument.
What is affected by CVE-2026-19062?
CVE-2026-19062 affects the /paid/selectall.action file in the chiuwingyan house software.