CVE-2026-79569: SQL Injection
Published Sep 8, 2026
·Updated
MovieRecommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.
Affected Software
1 affected component
Movie_Recommend Movie_Recommend=1.0.0
Event History
Sep 8, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:18 PM
Description
Frequently Asked Questions
1
Which endpoint and input need to be reviewed for exposure?
Review the /loadingmore endpoint, specifically its sort parameter. Movie_Recommend v1.0.0 is identified as affected.
2
What can an attacker gain through successful exploitation?
A crafted SQL statement supplied through the sort parameter can allow an attacker to access sensitive database information.