Skip to content
OpenAdvisories

Vendor

zyx0814

5 known vulnerabilities.

Products

FilePress 4 Pichome 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-90879

    zyx0814 FilePress Publish search.php sql injection

    A vulnerability was identified in zyx0814 FilePress up to 3.0.1. This vulnerability affects unknown code of the file dzz/publish/search.php of the component Publish Module. Such manipulation of the argument orderby/order leads to sql injection. The attack can…

    zyx0814 FilePress
  • High 7.3
    CVE-2026-8133

    zyx0814 FilePress Shares Filelist API admin.php sql injection

    A security vulnerability has been detected in zyx0814 FilePress up to 2.2.0. Affected by this vulnerability is an unknown functionality of the file dzz/shares/admin.php of the component Shares Filelist API. Such manipulation of the argument order leads to sql…

    zyx0814 FilePress