CVE-2026-6982

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-6982", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-04-24T19:03:07.004Z", "datePublished": "2026-04-25T14:30:22.644Z", "dateUpdated": "2026-04-27T13:34:22.413Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-25T14:30:22.644Z"}, "title": "star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-89", "lang": "en", "description": "SQL Injection"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-74", "lang": "en", "description": "Injection"}]}], "affected": [{"vendor": "star7th", "product": "ShowDoc", "versions": [{"version": "2.10.0", "status": "affected"}, {"version": "2.10.1", "status": "affected"}, {"version": "2.10.2", "status": "affected"}, {"version": "2.10.3", "status": "affected"}, {"version": "2.10.4", "status": "affected"}, {"version": "2.10.5", "status": "affected"}, {"version": "2.10.6", "status": "affected"}, {"version": "2.10.7", "status": "affected"}, {"version": "2.10.8", "status": "affected"}, {"version": "2.10.9", "status": "affected"}, {"version": "2.10.10", "status": "affected"}, {"version": "3.0", "status": "affected"}, {"version": "3.1", "status": "affected"}, {"version": "3.2", "status": "affected"}, {"version": "3.3", "status": "affected"}, {"version": "3.4", "status": "affected"}, {"version": "3.5", "status": "affected"}, {"version": "3.6", "status": "affected"}, {"version": "3.6.0", "status": "affected"}, {"version": "3.6.1", "status": "affected"}, {"version": "3.6.2", "status": "affected"}, {"version": "3.7", "status": "affected"}, {"version": "3.8.0", "status": "affected"}, {"version": "3.8.1", "status": "unaffected"}], "cpes": ["cpe:2.3:a:showdoc:showdoc:*:*:*:*:*:*:*:*"], "modules": ["API Page Sort Endpoint"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a manipulation of the argument pages can lead to sql injection. The attack may be launched remotely. Upgrading to version 3.8.1 addresses this issue. It is suggested to upgrade the affected component. According to the researcher, \"[t]he vendor explicitly stated they will not backport patches to the older affected versions.\""}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C"}}], "timeline": [{"time": "2026-04-24T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-04-24T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-04-24T21:08:21.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "LIU Tingwei (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/359525", "name": "VDB-359525 | star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/359525/cti", "name": "VDB-359525 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/795528", "name": "Submit #795528 | star7th ShowDoc 2.5.3 - 2.10.10, 3.0.0 - 3.6.2 SQL Injection", "tags": ["third-party-advisory"]}, {"url": "https://gist.github.com/saDL0w/555e19668264f98d96259ad47ea33811", "tags": ["related"]}, {"url": "https://github.com/star7th/showdoc/releases/tag/v3.8.1", "tags": ["patch"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-27T13:18:53.358204Z", "id": "CVE-2026-6982", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-27T13:34:22.413Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-6982", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-27T13:18:53.358204Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-27T13:18:54.468Z"}}], "cna": {"title": "star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection", "credits": [{"lang": "en", "type": "reporter", "value": "LIU Tingwei (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C"}}], "affected": [{"cpes": ["cpe:2.3:a:showdoc:showdoc:*:*:*:*:*:*:*:*"], "vendor": "star7th", "modules": ["API Page Sort Endpoint"], "product": "ShowDoc", "versions": [{"status": "affected", "version": "2.10.0"}, {"status": "affected", "version": "2.10.1"}, {"status": "affected", "version": "2.10.2"}, {"status": "affected", "version": "2.10.3"}, {"status": "affected", "version": "2.10.4"}, {"status": "affected", "version": "2.10.5"}, {"status": "affected", "version": "2.10.6"}, {"status": "affected", "version": "2.10.7"}, {"status": "affected", "version": "2.10.8"}, {"status": "affected", "version": "2.10.9"}, {"status": "affected", "version": "2.10.10"}, {"status": "affected", "version": "3.0"}, {"status": "affected", "version": "3.1"}, {"status": "affected", "version": "3.2"}, {"status": "affected", "version": "3.3"}, {"status": "affected", "version": "3.4"}, {"status": "affected", "version": "3.5"}, {"status": "affected", "version": "3.6"}, {"status": "affected", "version": "3.6.0"}, {"status": "affected", "version": "3.6.1"}, {"status": "affected", "version": "3.6.2"}, {"status": "affected", "version": "3.7"}, {"status": "affected", "version": "3.8.0"}, {"status": "unaffected", "version": "3.8.1"}]}], "timeline": [{"lang": "en", "time": "2026-04-24T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-04-24T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-04-24T21:08:21.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/359525", "name": "VDB-359525 | star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/359525/cti", "name": "VDB-359525 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/795528", "name": "Submit #795528 | star7th ShowDoc 2.5.3 - 2.10.10, 3.0.0 - 3.6.2 SQL Injection", "tags": ["third-party-advisory"]}, {"url": "https://gist.github.com/saDL0w/555e19668264f98d96259ad47ea33811", "tags": ["related"]}, {"url": "https://github.com/star7th/showdoc/releases/tag/v3.8.1", "tags": ["patch"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a manipulation of the argument pages can lead to sql injection. The attack may be launched remotely. Upgrading to version 3.8.1 addresses this issue. It is suggested to upgrade the affected component. According to the researcher, \"[t]he vendor explicitly stated they will not backport patches to the older affected versions.\""}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "SQL Injection"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-74", "description": "Injection"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-25T14:30:22.644Z"}}}, "cveMetadata": {"cveId": "CVE-2026-6982", "state": "PUBLISHED", "dateUpdated": "2026-04-27T13:34:22.413Z", "dateReserved": "2026-04-24T19:03:07.004Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-04-25T14:30:22.644Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:showdoc:showdoc:*:*:*:*:*:*:*:*"], "modules": ["API Page Sort Endpoint"], "product": "ShowDoc", "vendor": "star7th", "versions": [{"status": "affected", "version": "2.10.0"}, {"status": "affected", "version": "2.10.1"}, {"status": "affected", "version": "2.10.2"}, {"status": "affected", "version": "2.10.3"}, {"status": "affected", "version": "2.10.4"}, {"status": "affected", "version": "2.10.5"}, {"status": "affected", "version": "2.10.6"}, {"status": "affected", "version": "2.10.7"}, {"status": "affected", "version": "2.10.8"}, {"status": "affected", "version": "2.10.9"}, {"status": "affected", "version": "2.10.10"}, {"status": "affected", "version": "3.0"}, {"status": "affected", "version": "3.1"}, {"status": "affected", "version": "3.2"}, {"status": "affected", "version": "3.3"}, {"status": "affected", "version": "3.4"}, {"status": "affected", "version": "3.5"}, {"status": "affected", "version": "3.6"}, {"status": "affected", "version": "3.6.0"}, {"status": "affected", "version": "3.6.1"}, {"status": "affected", "version": "3.6.2"}, {"status": "affected", "version": "3.7"}, {"status": "affected", "version": "3.8.0"}, {"status": "unaffected", "version": "3.8.1"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a manipulation of the argument pages can lead to sql injection. The attack may be launched remotely. Upgrading to version 3.8.1 addresses this issue. It is suggested to upgrade the affected component. According to the researcher, \"[t]he vendor explicitly stated they will not backport patches to the older affected versions.\""}, {"lang": "es", "value": "Se determin\u00f3 una vulnerabilidad en star7th ShowDoc hasta 2.10.10/3.6.2/3.8.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo servidor/Application/Api/Controller/PageController.class.PHP del componente API Page Sort Endpoint. Ejecutar una manipulaci\u00f3n del argumento pages puede conducir a una inyecci\u00f3n SQL. El ataque puede lanzarse de forma remota. La actualizaci\u00f3n a la versi\u00f3n 3.8.1 aborda este problema. Se sugiere actualizar el componente afectado. Seg\u00fan el investigador, \u2019el proveedor declar\u00f3 expl\u00edcitamente que no aplicar\u00e1 parches retroactivamente a las versiones afectadas m\u00e1s antiguas\u2019."}], "id": "CVE-2026-6982", "lastModified": "2026-10-25T23:10:00.167", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-6982", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-27T13:18:53.358204Z", "version": "2.0.3"}}]}, "published": "2026-04-25T15:16:17.823", "references": [{"source": "cna@vuldb.com", "url": "https://gist.github.com/saDL0w/555e19668264f98d96259ad47ea33811"}, {"source": "cna@vuldb.com", "url": "https://github.com/star7th/showdoc/releases/tag/v3.8.1"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/795528"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/359525"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/359525/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-74"}, {"lang": "en", "value": "CWE-89"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.8"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.9"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.10"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.6.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.6.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.6.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.8.0"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "3.8.1"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "showdoc", "vendor": "showdoc"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.8"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.9"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.10.10"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.6.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.6.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.6.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.8.0"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "3.8.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "ShowDoc", "source": "cna", "vendor": "star7th"}, "product": "showdoc", "vendor": "star7th"}], "analysis": {"en": {"generated_at": "2026-04-28T13:29:47.186267+00:00", "value": {"mitigation_remediation": ["Upgrade Star7th ShowDoc to version 3.8.1 or later, which contains the fix for the SQL injection flaw.", "If an upgrade cannot be performed immediately, disable or restrict access to the API Page Sort Endpoint until the update is applied, limiting the opportunity for remote exploitation.", "Ensure that all API endpoints, including the affected Page Sort Endpoint, require authenticated and authorized access, and apply any vendor-provided configuration hardening to enforce these controls."], "summary": {"action": "Patch Immediately", "impact": "Remote SQL Injection"}, "threat_synthesis": {"affected_systems": "Star7th ShowDoc versions up to 2.10.10, 3.6.2, and 3.8.0 are affected. The issue resides in the API Page Sort Endpoint component of the file server/application controller.", "description_and_impact": "The vulnerability in the PageController.class.PHP of star7th ShowDoc allows an attacker to manipulate the \"pages\" argument in the API Page Sort Endpoint. This manipulation results in a SQL injection that could expose or alter data stored in the database, making the weakness a severe confidentiality breach. The flaw is identified as a classic SQL injection (CWE\u201174, CWE\u201189) and can be triggered from a remote location without local access.", "risk_and_exploitability": "The CVSS score of 5.3 classifies the issue as medium severity, while an EPSS score of less than 1% indicates a low estimated exploitation probability. The vulnerability is not listed in the CISA KEV catalog. An attacker can launch the exploit remotely, but the description does not specify required authentication or privileges; therefore, the attack may rely on open API access or insufficient access controls. If successfully exploited, the attacker could gain unauthorized read or modify access to the database via injected SQL commands."}}}}, "created": "2026-04-27T19:52:45.512353+00:00", "updated": "2026-04-28T13:30:32.097653+00:00", "vendors": ["showdoc", "showdoc$PRODUCT$showdoc", "star7th", "star7th$PRODUCT$showdoc"]}