CVE-2026-63167 | Omnispace Agora Project up to 26.10.0 SQL Query Construction MdlUser.php personsSort sql injection

A vulnerability identified as problematic has been detected in Omnispace Agora Project up to 26.10.0. The affected element is an unknown function of the file MdlUser.php of the component SQL Query Construction. The manipulation of the argument personsSort leads to sql injection.

This vulnerability is documented as CVE-2026-63167. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More