Skip to content
Heist/ feed
High

nemoTyrant manong func.php arr2sql sql injection

Type: advisorySource: Official CVE List1 source record

A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/del_cache/arr2sql of the file func.php. This manipulation causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The reported GitHub issue was closed with the reason "completed". However, it was not possible to determine the PR or commit which could have fixed this issue.

Announced Source revision 1
Original source ↗

CVE-2026-111866

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-111866

manong

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:2.3:a:nemotyrant:manong:*:*:*:*:*:*:*:*"
    ],
    "vendor": "nemoTyrant",
    "product": "manong",
    "versions": [
      {
        "status": "affected",
        "version": "7c9e5228e133b9267ad3a415833bc9bb53193bb4"
      }
    ]
  }
]
Related CVEs
CVE-2026-111866

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#38962 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement