flightphp/core vulnerabilities (Packagist)
5 vulnerabilities.
-
flightphp/corePackagist Flight: Sensitive information disclosure via default error handler in flightphp/core 7.5 High -
flightphp/corePackagist Flight: HTTP method override enabled by default enables CSRF escalation and middleware bypass in flightphp/core 7.5 High -
flightphp/corePackagist Flight: SQL Injection via unvalidated identifiers in SimplePdo::insert / update / delete 8.8 High -
flightphp/corePackagist Flight: Path traversal in `make:controller` CLI creates arbitrary directories outside project root 4.4 Medium -
flightphp/corePackagist Flight: Reflected XSS via unvalidated JSONP callback in Flight::jsonp() 8.6 High