← Database

CVE-2026-51946

MEDIUM CVSS: 6.5 Published: 2026-07-01 Modified: 2026-07-02

Description

SQL Injection vulnerability in GoAdminGroup GoAdmin (last release v1.2.26) allows a remote attacker to execute arbitrary code and obtain sensitive information via the the __sort_type URL parameter on all /admin/info/{table} endpoints

Affected Platforms

Unknown

Weakness Type

CWE-89

References