CVE-2026-94082

Summary

This flaw allows an attacker to inject malicious SQL code, potentially leading to data theft or manipulation in Quiz Cat versions 3.1.1 and earlier.

Exploitability

Exploitation requires access to the application's input, making it moderately easy if the application is misconfigured or if input is not properly sanitized.

Blast radius

If exploited, the attacker could gain full control over the database, leading to data loss or unauthorized data manipulation.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Quiz Cat version 3.2 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.