← All advisories

Critical severity9.8NVD Advisory· Published Mar 28, 2022· Updated Jun 17, 2026

CVE-2022-26268

CVE-2022-26268

Description

Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /app/controller/Books.php.

Affected products

2

Xiaohuanxiong/Xiaohuanxiongdescription
Xiaohuanxiong/xiaohuanxiongllm-create
Range: = 1.0

Patches

Vulnerability mechanics

References

1

github.com/hiliqi/xiaohuanxiong/issues/33nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.