CVE-2026-37505

SQL Injection via ORDER BY clause in V2Board thru 1.7.4. In app/Http/Controllers/Admin/UserController.php, the sort parameter from user input is passed directly to User::orderBy($sort, $sortType) without validation. An authenticated admin can sort users by any database column including password, remember_token, and other sensitive fields, enabling information disclosure through ordering analysis.

• CWE-89

• https://gist.github.com/sgInnora/1330e1a82caa79906eec55eeff2c99b9Third Party Advisory
• https://github.com/v2board/v2boardProduct

Published

May 1, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-37470An issue in ClipBucket v5 v.5.5.2 allows an attacker to exec…7.3
• CVE-2026-3748A security flaw has been discovered in Bytedesk up to 1.3.9.…8.8
• CVE-2026-3749A weakness has been identified in Bytedesk up to 1.3.9. This…8.8
• CVE-2026-3750A security vulnerability has been detected in ContiNew Admin…7.2
• CVE-2026-37503Cross-Site Scripting (XSS) in V2Board thru 1.7.4. The custom…4.8
• CVE-2026-37504Sensitive server_token exposed via GET parameter in V2Board …7.5
• CVE-2026-3751A vulnerability was detected in SourceCodester Employee Task…7.2
• CVE-2026-3752A flaw has been found in SourceCodester Employee Task Manage…7.2
• CVE-2026-37525AGL app-framework-binder (afb-daemon) through v19.90.0 conta…7.8
• CVE-2026-37526AGL app-framework-binder (afb-daemon) through v19.90.0 allow…7.8
• CVE-2026-3753A vulnerability has been found in SourceCodester Sales and I…8.8
• CVE-2026-37530AGL agl-service-can-low-level thru 17.1.12 contains a stack …7.5