Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: zyx0814 Clear all filters
TI-2026-83131 CVE-2026-119657 · GHSA-6vrq-vfh4-v7v2

FilePress Missing Authorization in PicHome Library Folder Operations

Priority LOW 12

FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to manage other libraries' folders because checkuserperm_by_uid only checks membership of any…

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.0033 Published 2026-10-30 No fix listed CWE-639
TI-2026-75405 CVE-2026-111619 · GHSA-9jgv-3gjv-7fg7

SQL injection in FilePress via the asc parameter

Priority MEDIUM 64

FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unvalidated asc parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0042 Published 2026-10-16 No fix listed CWE-89
TI-2025-01500 CVE-2025-1743 · GHSA-v53m-h2x7-3m5p

zyx0814 Pichome index.php path traversal

Priority HIGH 70

A vulnerability, which was classified as critical, was found in zyx0814 Pichome 2.1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0166 Published 2025-02-27 No fix listed CWE-22