VYPR

file-management-system-php

by Oretnom23

CVEs (8)

  • CVE-2026-114259HigOct 21, 2026
    risk 0.47cvss 7.3epss —

    A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function save_files of the file admin_class.php. Executing a manipulation of the argument Upload can lead to unrestricted upload. It is possible to…

  • CVE-2026-114258HigOct 21, 2026
    risk 0.47cvss 7.3epss —

    A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of the file files.php of the component File Management. Performing a manipulation of the argument fid/id…

  • CVE-2026-114257HigOct 21, 2026
    risk 0.47cvss 7.3epss —

    A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function readfile of the file download.php of the component File Download. Such manipulation of the argument…

  • CVE-2026-114256HigOct 21, 2026
    risk 0.47cvss 7.3epss —

    A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function save_folder/delete_folder/delete_file/file_rename/save_files of the file admin_class.php of the component Folder Management. This…

  • CVE-2026-114255HigOct 21, 2026
    risk 0.47cvss 7.3epss —

    A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function save_user of the file admin_class.php of the component User Account Management. The manipulation of the argument…

  • CVE-2026-114254HigOct 21, 2026
    risk 0.47cvss 7.3epss —

    A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file admin_class.php. The manipulation of the argument username/password leads to sql injection. Remote exploitation of…

  • CVE-2026-114260MedOct 21, 2026
    risk 0.42cvss 6.5epss —

    A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability affects the function delete_folder of the file ajax.php of the component AJAX Handler. The manipulation of the argument ID leads to missing…

  • CVE-2026-114253MedOct 21, 2026
    risk 0.41cvss 6.3epss —

    A vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. The impacted element is the function include of the file index.php. Executing a manipulation of the argument page can lead to file inclusion. The attack may be…