CVE-2026-41143: YesWiki vulnerable to authenticated SQL Injection via id_fiche in EntryManager::formatDataBeforeSave()
YesWiki is a wiki system written in PHP. Prior to version 4.6.1, YesWiki bazar module contains a SQL injection vulnerability in tools/bazar/services/EntryManager.php at line 704. The $data['idfiche'] value (sourced from $POST['idfiche']) is concatenated directly into a raw SQL query without any sanitization or parameterization. This issue has been patched in version 4.6.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-41143?
CVE-2026-41143 has a medium severity level due to its potential for authenticated SQL injection attacks.
How do I fix CVE-2026-41143?
To fix CVE-2026-41143, upgrade YesWiki to version 4.6.1 or later.
Who is affected by CVE-2026-41143?
Users of YesWiki versions prior to 4.6.1 are affected by CVE-2026-41143.
What type of vulnerability is CVE-2026-41143?
CVE-2026-41143 is an authenticated SQL injection vulnerability.
Where in the codebase does CVE-2026-41143 occur?
CVE-2026-41143 occurs in the EntryManager::formatDataBeforeSave() method in tools/bazar/services/EntryManager.php.