Threats tagged 'ghsa-9jgv-3gjv-7fg7'

1 threat

Threats tagged 'ghsa-9jgv-3gjv-7fg7'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.3%	CVE-2026-111619FilePress · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in zyx0814… High7.1EPSS 0.3%2026-10-16CVE Database V5CVE-2026-111619 FilePress versions up to 3.0.1 contain an SQL injection vulnerability that allows authenticated low-privilege users to inject SQL code via the 'asc' parameter in ORDER BY clauses. This vulnerability affects specific PHP scripts and can be exploited using blind boolean or time-based subqueries to extract sensitive database information, including administrator credential hashes. EPSS 0.3%Vulnerability zyx0814 #ghsa-9jgv-3gjv-7fg7	CVE Database V5	2026-10-16

Showing 1–1 of 1 result