CVE-2026-114259

A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function savefiles of the file adminclass.php. Executing a manipulation of the argument Upload can lead to unrestricted upload. It is possible to launch the attack...

CVE-2026-114260

A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability affects the function deletefolder of the file ajax.php of the component AJAX Handler. The manipulation of the argument ID leads to missing authentication. The...

CVE-2026-114261

A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function index/store/update/destroy of the file app/Http/Controllers/FileController.php of the component Files API. The manipulation of the argument Request results in...

CVE-2026-114258

A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of the file files.php of the component File Management. Performing a manipulation of the argument fid/id results in sql...

EUVD-2026-107394

A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the function store of the file app/Http/Controllers/FileController.php. This manipulation of the argument File causes unrestricted upload. The attack may be initiated remotely. The explo...

CVE-2026-114262

The file-management-system (dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df) contains an unrestricted file upload vulnerability in the store function of app/Http/Controllers/FileController.php . This issue stems from the manipulation of the File argument, allowing for remote attacks. The exploit has bee...

EUVD-2026-107367

A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function index/store/update/destroy of the file app/Http/Controllers/FileController.php of the component Files API. The manipulation of the argument Request results in...

CVE-2026-114261

A vulnerability exists in the MomoTommy file-management-system within the Files API component. The issue affects the index/store/update/destroy functions in the file app/Http/Controllers/FileController.php. Due to missing authentication resulting from the manipulation of the Request argument, an ...

EUVD-2026-107364

A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability affects the function deletefolder of the file ajax.php of the component AJAX Handler. The manipulation of the argument ID leads to missing authentication. The...

CVE-2026-114260

The oretnom23 file-management-system-php (up to commit 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 ) contains a missing authentication vulnerability in the AJAX Handler component. Specifically, the delete_folder function within the ajax.php file fails to properly authenticate users when the ID argum...

EUVD-2026-107363

A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function savefiles of the file adminclass.php. Executing a manipulation of the argument Upload can lead to unrestricted upload. It is possible to launch the attack...

CVE-2026-114259

The oretnom23 file-management-system-php software (up to commit 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 ) is vulnerable to an unrestricted upload flaw. The issue resides in the save_files function within the admin_class.php file. By manipulating the Upload argument, an attacker can achieve an un...

CVE-2026-114257

A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function readfile of the file download.php of the component File Download. Such manipulation of the argument ID leads to sql...

CVE-2026-114254

A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file adminclass.php. The manipulation of the argument username/password leads to sql injection. Remote exploitation of the attack is...

CVE-2026-114253

A vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. The impacted element is the function include of the file index.php. Executing a manipulation of the argument page can lead to file inclusion. The attack may be launched remotely...

CVE-2026-114256

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function savefolder/deletefolder/deletefile/filerename/savefiles of the file adminclass.php of the component Folder Management. This manipulation of the argument...

CVE-2026-114255

A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function saveuser of the file adminclass.php of the component User Account Management. The manipulation of the argument name/username/password/type/id resul...

CVE-2026-114258

The oretnom23 file-management-system-php software contains an SQL injection vulnerability within the File Management component, specifically affecting the files.php file. The root cause is the improper handling of the fid/id argument, which allows for remote attack initiation. While the exploit i...

EUVD-2026-107390

A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of the file files.php of the component File Management. Performing a manipulation of the argument fid/id results in sql...

CVE-2026-114258 oretnom23 file-management-system-php File Management files.php sql injection

A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of the file files.php of the component File Management. Performing a manipulation of the argument fid/id results in sql...