CVE-2023-36076 Information

Description

SQL Injection vulnerability in smanga version 3.1.9 and earlier allows remote attackers to execute arbitrary code and gain sensitive information via mediaId mangaId and userId parameters in php/history/add.php.

Reference

https://github.com/lkw199711/smanga/issues/100