CVE-2026-6674

Name of the Vulnerable Software and Affected Versions CMS für Motorrad Werkstätten versions prior to 1.0.1

Description This issue is a SQL Injection, which occurs when an attacker can interfere with the queries that an application makes to its database. Authenticated users with subscriber-level access and above can append additional SQL queries to existing ones to extract sensitive information from the database. This is caused by insufficient escaping of the user-supplied arttype parameter and a lack of sufficient preparation on the existing SQL query.

Recommendations Update CMS für Motorrad Werkstätten to a version newer than 1.0.0. Avoid using the arttype parameter until the software is updated.