Flightphp vulnerabilities
Products
- Core 6
Newest
- flightphp core Flight: Sensitive information disclosure via default error handler in flightphp/core 7.5 High
- flightphp core Flight: HTTP method override enabled by default enables CSRF escalation and middleware bypass in flightphp/core 7.5 High
- flightphp core Flight: SQL Injection via unvalidated identifiers in SimplePdo::insert / update / delete 8.8 High
- flightphp core Flight: Path traversal in `make:controller` CLI creates arbitrary directories outside project root 4.4 Medium
- flightphp core Flight: Reflected XSS via unvalidated JSONP callback in Flight::jsonp() 8.6 High
- flightphp flight, core +1 more Denial of Service (DoS) vulnerability in mikecao/flight 7.5 High