Skip to content
OpenAdvisories

Product · zyx0814

FilePress

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.0
    CVE-2026-119657

    FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations

    FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to manage other libraries' folders because checkuserperm_by_uid only checks membership of any library. Attackers who know another lib…

    zyx0814 FilePress
  • Medium 6.5
    CVE-2026-111619

    FilePress through 3.0.1 SQL Injection via asc Parameter in filelist.php

    FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unvalidated asc parameter. Attackers can use blind boolean or time-based subqueries in dzz/pichome/librar…

    zyx0814 FilePress