forklit/cve-2026-36826genesisQL-sqli-CVE-2026-36826
genesisQL 1.1.1 is vulnerable to SQL Injection in the checkPassword
function. User-supplied username and password fields are
interpolated directly into the SQL query string without
parameterization, allowing unauthenticated SQL injection and
authentication bypass via the login form.
CWE-89: Improper Neutralization of Special Elements used in an SQL Command
File: server/utils/userController.js
```javascript
function checkPassword (req, res, next){
const { username, password } = req.body;
const text = SELECT * FROM users WHERE username='${username}' AND password='${password}';
}
```
Authentication bypass via SQL injection in login form (unauthenticated, remote).
Use parameterized queries / prepared statements instead of string interpolation.
