CVE-2026-111619
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unvalidated asc parameter. Attackers can use blind boolean or time-based subqueries in dzz/pichome/library/filelist.php and dzz/collection/filelist.php to extract database rows including administrator credential hashes.
Risk Assessment
Database data leakage, including administrator password hashes — potential privilege escalation and full system takeover. High risk of confidentiality and integrity breach.
Recommendation
Upgrade FilePress beyond 3.0.1 once available and implement asc parameter validation and query parameterization in filelist.php files. Until a fix is released, consider restricting low-privilege user permissions.
Other vulnerabilities in FilePress
Original NVD description (English source)
FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unvalidated asc parameter. Attackers can use blind boolean or time-based subqueries in dzz/pichome/library/filelist.php and dzz/collection/filelist.php to extract database rows including administrator credential hashes.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS