CVE-2026-114257 oretnom23 file-management-system-php File Download download.php readfile sql injection

A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function readfile of the file download.php of the component File Download. Such manipulation of the argument ID leads to sql...

CVE-2026-114257 oretnom23 file-management-system-php File Download download.php readfile sql injection

A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function readfile of the file download.php of the component File Download. Such manipulation of the argument ID leads to sql...

CVE-2026-114257 oretnom23 file-management-system-php File Download download.php readfile sql injection

A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function readfile of the file download.php of the component File Download. Such manipulation of the argument ID leads to sql...

EUVD-2026-107336

A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function readfile of the file download.php of the component File Download. Such manipulation of the argument ID leads to sql...

CVE-2026-114257

The oretnom23 file-management-system-php is vulnerable to SQL injection in the File Download component, specifically within the readfile function of the download.php file. The vulnerability is triggered by the manipulation of the ID argument and can be exploited remotely. While the exploit has be...

PHPOffice PhpSpreadsheet input validation error vulnerability

PHPOffice PhpSpreadsheet versions 1.30.7, 2.1.19, 2.4.8, 3.10.8, and earlier versions prior to 5.10.0 contain a security vulnerability. This vulnerability arises because the DOCTYPE detection mechanism in XmlScanner::scan fails to account for ISO-2022 escaped sequences within XLSX XML sections. A...

Elated-Themes Academist Core code injection vulnerability

Elated-Themes Academist Core versions 1.4.1 and earlier contain a code injection vulnerability. This vulnerability stems from improper control over filenames in include/require statements within PHP programs, potentially leading to local PHP file inclusion...

Agent Zero cross-site scripting vulnerability

Versions of Agent Zero Web UI prior to 1.15 contain a cross-site scripting vulnerability. This vulnerability arises from improper sanitization of user inputs in chat messages or file uploads, allowing injected JavaScript to execute within the context of an authenticated Agent Zero Web UI session...

Woothemes Diarise path traversal vulnerability

Woothemes Diarise versions 1.5.9 and earlier contain a path traversal vulnerability. This flaw stems from the lack of validation on the calendar parameter in download.php, potentially allowing unauthenticated attackers to read arbitrary files via the file:// path, thereby exposing sensitive files...

WordPress Ad Widget for WordPress code injection vulnerability

A code injection vulnerability exists in WordPress Ad Widget for WordPress versions 2.2.0 through 2.12.0. This vulnerability stems from the require function in views/modal/index.php failing to sanitize input passed to the step parameter. As a result, authenticated users may execute a directory...

liukuo362573 YiShaAdmin path traversal vulnerability

Liukuo362573 YiShaAdmin Versions 2.2 through 3.1 contain a path traversal vulnerability. This vulnerability stems from an unauthenticated path traversal flaw in the /admin/File/DownloadFile endpoint. Attackers can exploit this by using directory traversal sequences in the filePath parameter and...

Intermesh group-office path traversal vulnerability

Versions of Intermesh Group-Office prior to 3.3.0 and 3.5.5 contain a path traversal vulnerability. This vulnerability stems from a path traversal flaw in compress.php. Remote attackers can exploit it without authentication by manipulating the ../ sequence within the file parameter, thereby readi...

FanRuan FineReport path traversal vulnerability

FanRuan FineReport version 9.0 contains a path traversal vulnerability. This vulnerability stems from a path traversal issue in the designsavesvg operation within /WebReport/ReportServer. Unauthenticated attackers can write arbitrary files via the filePath parameter, potentially leading to the...

Penta Security Systems WAPPLES path traversal vulnerability

Versions 4.0.54.1, 5.0, and 6.0 of Penta Security Systems WAPPLES contain a path traversal vulnerability. This vulnerability stems from path traversal in the name parameter of /webapi/file/transfer. Authenticated attackers can send GET requests containing ../ sequences to download arbitrary files...

PHPOffice PhpSpreadsheet input validation error vulnerability

A security vulnerability exists in PHPOffice PhpSpreadsheet versions prior to 3.10.8 and 4.0.0 up to 5.10.0. This vulnerability stems from improper entity decoding of SpreadsheetML XML by Reader\Xml. The double-encoded “” becomes a literal “” after two callbacks, allowing SimpleXML to receive...

EUVD-2026-107332

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function savefolder/deletefolder/deletefile/filerename/savefiles of the file adminclass.php of the component Folder Management. This manipulation of the argument...

CVE-2026-114256 oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function savefolder/deletefolder/deletefile/filerename/savefiles of the file adminclass.php of the component Folder Management. This manipulation of the argument...

CVE-2026-114256 oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function savefolder/deletefolder/deletefile/filerename/savefiles of the file adminclass.php of the component Folder Management. This manipulation of the argument...

CVE-2026-114256

A SQL injection vulnerability exists in the Folder Management component of oretnom23 file-management-system-php (up to commit 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4). The flaw is located in the admin_class.php file and affects the save_folder , delete_folder , delete_file , file_rename , and sa...

CVE-2026-114255 oretnom23 file-management-system-php User Account Management admin_class.php save_user sql injection

A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function saveuser of the file adminclass.php of the component User Account Management. The manipulation of the argument name/username/password/type/id resul...