anonhaven

CVE-2026-51077

NONE
Updated Jul 28, 2026
PHP
Parameter Value
Vendor PHP
Public PoC No

SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the sys_sql_query.php component

Vulnerable Products

n/a:n/a

References 2

https://www.dedecms.com/
NVD
https://gitee.com/etera1i2e/cve-2026-51077/blob/master/README.md
NVD
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-51565

PHP

None

CVE-2026-51078

PHP

None

CVE-2026-55579

PHP

9.8

CVE-2026-55578

PHP

8.8

CVE-2026-54540

PHP

8.8