CVE-2026-7002

A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/get_message_ajax.php of the component Private Message Handler. Executing a manipulation of the argument c_id can lead to sql injection. It is possible to launch the attack remotely.

• CWE-74
• CWE-89

• https://vuldb.com/submit/797302
• https://vuldb.com/vuln/359561
• https://vuldb.com/vuln/359561/cti

Published

Apr 25, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-69989Use after free in DNS Server allows an unauthorized attacker…8.1
• CVE-2026-6999A flaw has been found in BIVOCOM TR321 21.1.1.50. Affected b…2.4
• CVE-2026-7000A vulnerability has been found in Datacom DM4100 1.3.6.1.4.1…2.4
• CVE-2026-70009Improper limitation of a pathname to a restricted directory …9.8
• CVE-2026-7001A vulnerability was found in Datacom DM4100 1.3.6.1.4.1.3709…2.4
• CVE-2026-70019Windows hard link in Windows Compressed Folder allows an una…6.5
• CVE-2026-7006Sublime Text for Windows through Build 4192 (Sublime Text 4)…7.3
• CVE-2026-70065Missing release of memory after effective lifetime in Window…7.5
• CVE-2026-7007The Zephyr ext2 file system validates the on-disk superblock…4.6
• CVE-2026-7009When curl is told to use the Certificate Status Request TLS …5.3
• CVE-2026-70091Concurrent execution using shared resource with improper syn…5.9
• CVE-2026-7010HTTP::Tiny versions before 0.093 for Perl do not validate CR…6.5