---
id: CVE-2026-114258
title: oretnom23 file-management-system-php File Management files.php sql injection
summary: >-
  A vulnerability was detected in oretnom23 file-management-system-php up to
  2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some
  unknown functionality of the file files.php of the component File Management.
  Performing …
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-89
  - CWE-74
vendor: oretnom23
product: file-management-system-php
affected:
  - file-management-system-php 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4
published: '2026-10-21'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T16:15:18.449Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-114258'
references:
  - url: 'https://vuldb.com/vuln/424690'
    label: >-
      VDB-424690 | oretnom23 file-management-system-php File Management
      files.php sql injection
  - url: 'https://vuldb.com/vuln/424690/cti'
    label: 'VDB-424690 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-114258'
    label: CVE-2026-114258 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1018610'
    label: >-
      Submit #1018610 | oretnom23 file-management-system-php
      2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 SQL Injection
  - url: 'https://github.com/oretnom23/file-management-system-php/issues/6'
  - url: 'https://github.com/oretnom23/file-management-system-php/'
tags:
  - cve.org
ingestedAt: '2026-10-21T17:07:51.302Z'
---

## Overview

A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of the file files.php of the component File Management. Performing a manipulation of the argument fid/id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

## Affected

- `file-management-system-php 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.