CVE-2026-114257

The oretnom23 file-management-system-php is vulnerable to SQL injection in the File Download component, specifically within the readfile function of the download.php file. The vulnerability is triggered by the manipulation of the ID argument and can be exploited remotely. While the exploit has be...

CVE-2026-114257 oretnom23 file-management-system-php File Download download.php readfile sql injection

A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function readfile of the file download.php of the component File Download. Such manipulation of the argument ID leads to sql...

EUVD-2026-107336

A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function readfile of the file download.php of the component File Download. Such manipulation of the argument ID leads to sql...

EUVD-2026-107332

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function savefolder/deletefolder/deletefile/filerename/savefiles of the file adminclass.php of the component Folder Management. This manipulation of the argument...

CVE-2026-114256

A SQL injection vulnerability exists in the Folder Management component of oretnom23 file-management-system-php (up to commit 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4). The flaw is located in the admin_class.php file and affects the save_folder , delete_folder , delete_file , file_rename , and sa...

CVE-2026-114256 oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function savefolder/deletefolder/deletefile/filerename/savefiles of the file adminclass.php of the component Folder Management. This manipulation of the argument...

CVE-2026-114255

A security flaw exists in the User Account Management component of oretnom23 file-management-system-php (up to commit 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4). The vulnerability is located in the save_user function within the admin_class.php file, where improper handling of the name/username/pas...

CVE-2026-114255 oretnom23 file-management-system-php User Account Management admin_class.php save_user sql injection

A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function saveuser of the file adminclass.php of the component User Account Management. The manipulation of the argument name/username/password/type/id resul...

EUVD-2026-107325

A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function saveuser of the file adminclass.php of the component User Account Management. The manipulation of the argument name/username/password/type/id resul...

CVE-2026-114254 oretnom23 file-management-system-php admin_class.php login sql injection

A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file adminclass.php. The manipulation of the argument username/password leads to sql injection. Remote exploitation of the attack is...

EUVD-2026-107323

A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file adminclass.php. The manipulation of the argument username/password leads to sql injection. Remote exploitation of the attack is...

CVE-2026-114254

A SQL injection vulnerability exists in the Login function of the admin_class.php file within oretnom23 file-management-system-php (up to commit 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4). An attacker can manipulate the username or password arguments to execute arbitrary SQL commands. Remote explo...

CVE-2026-114253

The oretnom23 file-management-system-php software (up to commit 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 ) is vulnerable to a file inclusion flaw. The issue resides in the include function within the index.php file, where manipulating the page argument allows for remote execution of the attack. W...

CVE-2026-114253 oretnom23 file-management-system-php index.php include file inclusion

A vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. The impacted element is the function include of the file index.php. Executing a manipulation of the argument page can lead to file inclusion. The attack may be launched remotely...

EUVD-2026-107305

A vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. The impacted element is the function include of the file index.php. Executing a manipulation of the argument page can lead to file inclusion. The attack may be launched remotely...

PT-2026-120667

A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function save user of the file admin class.php of the component User Account Management. The manipulation of the argument name/username/password/type/id...

PT-2026-120668

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function save folder/delete folder/delete file/file rename/save files of the file admin class.php of the component Folder Management. This manipulation of the...

PT-2026-120669

A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function readfile of the file download.php of the component File Download. Such manipulation of the argument ID leads to sql...

PT-2026-120644

A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file admin class.php. The manipulation of the argument username/password leads to sql injection. Remote exploitation of the attack is...

PT-2026-120643

A vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. The impacted element is the function include of the file index.php. Executing a manipulation of the argument page can lead to file inclusion. The attack may be launched remotely...