Skip to content
OpenAdvisories

Vendor

o1lab

1 known vulnerabilities.

Products

xmysql 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-72572

    o1lab xmysql - Unauthenticated Path Traversal via name Query Parameter

    A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated remote attacker to read and download arbitrary files from the server. The lib/xapi.js file at lines 338 and 424 uses the user-controlled req.query.name parameter in path.j…

    o1lab xmysql