CVE-2026-114258

Name of the Vulnerable Software and Affected Versions oretnom23 file-management-system-php versions prior to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4

Description An issue exists in the File Management component within the files.php file. A remote attacker can perform a SQL injection by manipulating the fid/id arguments. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

Recommendations Update oretnom23 file-management-system-php to a version later than 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. As a temporary mitigation, restrict access to the files.php file or avoid using the fid and id parameters until a patch is applied.