A high-severity SQL injection vulnerability in YesWiki allows authenticated attackers to perform unauthorized database operations, potentially leading to full system compromise.

This vulnerability is a SQL injection (CWE-89) located in the ReactionManager::deleteUserReaction function. An authenticated user can inject malicious SQL via the {idreaction} and {id} URL parameters because the application fails to properly sanitize or parameterize input before concatenating it into a SQL LIKE clause.

The ability to inject arbitrary SQL commands poses a severe risk to data confidentiality, integrity, and availability. An attacker could extract sensitive information from the database, modify or delete critical wiki content, or escalate privileges within the application. Given the CVSS score of 8.8, this vulnerability represents a significant threat that could lead to complete unauthorized control over the application backend.

Immediate Action: Upgrade to YesWiki version 4.6.6 or later immediately to incorporate the necessary input sanitization fixes.

Proactive Monitoring: Review application access logs for unusual URL patterns containing SQL syntax or unexpected character sequences in the {idreaction} or {id} parameters.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting URL parameters until the software can be patched.

Public Exploit Available: No (exploit_available: false)

Due to the critical nature of SQL injection vulnerabilities and the high CVSS score, administrators should prioritize updating YesWiki to version 4.6.6. Failure to patch allows any authenticated user to potentially compromise the entire database instance, making timely remediation essential for maintaining the security of the platform.