Skip to content
OpenAdvisories

Vendor

zyx0814

5 known vulnerabilities.

Products

FilePress 4 Pichome 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.0
    CVE-2026-119657

    FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations

    FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to manage other libraries' folders because checkuserperm_by_uid only checks membership of any library. Attackers who know another lib…

    zyx0814 FilePress
  • Medium 6.5
    CVE-2026-111619

    FilePress through 3.0.1 SQL Injection via asc Parameter in filelist.php

    FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unvalidated asc parameter. Attackers can use blind boolean or time-based subqueries in dzz/pichome/librar…

    zyx0814 FilePress
  • Medium 5.3
    CVE-2025-1743 Scanner template

    zyx0814 Pichome index.php path traversal

    A vulnerability, which was classified as critical, was found in zyx0814 Pichome 2.1.0. This affects an unknown part of the file /index.php?mod=textviewer. The manipulation of the argument src leads to path traversal. It is possible to initiate the attack remo…

    zyx0814 Pichome