https://feed.craftedsignal.io/products/file-management-system-php-up-to-2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 21 Oct 2026 17:08:52 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-10-file-management-system-sqli/Wed, 21 Oct 2026 17:08:52 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-file-management-system-sqli/A SQL injection vulnerability exists in the Login function of admin_class.php in oretnom23 file-management-system-php, caused by the manipulation of the username or password arguments.<p>A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. The Login function of admin_class.php is susceptible to SQL injection via the manipulation of the username or password arguments. Remote exploitation is possible, and a public exploit exists. The project maintainer has been informed but has not yet responded.</p> highadvisory