{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/oretnom23-file-management-system-php-up-to-2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-114254"},{"id":"CVE-2026-114255"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["oretnom23 file-management-system-php (up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4)","file-management-system-php (up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["oretnom23"],"content_html":"\u003cp\u003eA vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. The Login function of admin_class.php is susceptible to SQL injection via the manipulation of the username or password arguments. Remote exploitation is possible, and a public exploit exists. The project maintainer has been informed but has not yet responded.\u003c/p\u003e\n","date_modified":"2026-10-21T19:16:03Z","date_published":"2026-10-21T17:08:52Z","id":"https://feed.craftedsignal.io/briefs/2026-10-file-management-system-sqli/","summary":"A SQL injection vulnerability exists in the Login function of admin_class.php in oretnom23 file-management-system-php, caused by the manipulation of the username or password arguments.","title":"oretnom23 file-management-system-php: SQL injection in Login function (CVE-2026-114254)","url":"https://feed.craftedsignal.io/briefs/2026-10-file-management-system-sqli/"}],"language":"en","title":"CraftedSignal Threat Feed - Oretnom23 File-Management-System-Php (Up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4)","version":"https://jsonfeed.org/version/1.1"}