Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Fileflows versions before 25.05.2 are affected by an authenticated SQL injection vulnerability in the library-file search function. Successful exploitation requires the system to use MySQL as the underlying database and could result in privilege escalation or data exfiltration.
CVSS Information
N/A
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
FileFlows 安全漏洞
Vulnerability Description
FileFlows是FileFlows开源的一个自托管文件处理系统。 Fileflows 25.05.2之前版本存在安全漏洞，该漏洞源于库文件搜索功能存在SQL注入，可能导致权限提升或数据渗漏。
CVSS Information
N/A
Vulnerability Type
N/A