Lucene search
K

6 matches found

CNNVD
CNNVD
added 2025/08/02 12:0 a.m.1 views

Files SQL注入漏洞

Files is a single-file PHP application from the individual developer Karl Ward. It can be dragged and dropped into any directory, allowing browsing of the files and directories within. A SQL injection vulnerability exists in Files 0.16.9 and prior versions, which stems from a failure to block...

9.2CVSS7.6AI score0.00321EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/08/02 12:0 a.m.1 views

Files 安全漏洞

Files is a single-file PHP application from the individual developer Karl Ward. It can be dragged and dropped into any directory, allowing browsing of the files and directories within. A security vulnerability exists in Files 0.16.9 and earlier versions, which stems from the file moving feature n...

6.1CVSS7.1AI score0.00322EPSS
Exploits0References4
OSV
OSV
added 2025/08/01 11:37 p.m.3 views

CVE-2025-54790 Files: Potential for SQL Injection through File Browse and List Operations

Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, Files does not have logic to prevent the exploitation of backend SQL queries without direct output, potentially allowing unauthorized data access. This is fixed in version 0.16.10...

9.2CVSS7.3AI score0.00321EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/08/01 11:37 p.m.2 views

CVE-2025-54790 Files: Potential for SQL Injection through File Browse and List Operations

Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, Files does not have logic to prevent the exploitation of backend SQL queries without direct output, potentially allowing unauthorized data access. This is fixed in version 0.16.10...

9.2CVSS7.6AI score0.00321EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/07/19 12:0 a.m.3 views

SheetJS Pro 资源管理错误漏洞

SheetJS Pro is open source a spreadsheet data parser and writer. Create beautiful reports . Faster import and export. Preview grids, images and PDFs. A security vulnerability exists in SheetJS Pro 0.16.9 and earlier versions, where an attacker can cause a denial of service via a crafted .xlsx...

5.5CVSS6.4AI score0.00212EPSS
Exploits0References6
CNNVD
CNNVD
added 2021/07/19 12:0 a.m.2 views

SheetJS Pro 资源管理错误漏洞

SheetJS Pro is open source a spreadsheet data parser and writer. Create beautiful reports. Faster import and export. Preview grids, images, and PDFs. A security vulnerability exists in SheetJS Pro version 0.16.9 and earlier, which can be exploited by attackers to cause a denial of service memory...

5.5CVSS5.7AI score0.00212EPSS
Exploits0References5
Rows per page
Query Builder