CVE-2026-114255 — oretnom23 file-management-system-php User Account Management admin_class.php save_user SQL injection

A security flaw has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. The flaw affects the save_user function in admin_class.php in the User Account Management component and allows SQL injection through manipulation of the name, username, password, type, or id arguments. The attack can be executed remotely. The source states that an exploit has been released publicly and may be used for attacks.