Vulnerabilities in flightphp
6 resultsCVE-2014-125127HIGHDenial of Service (DoS) vulnerability in mikecao/flightEPSS 0.4%CVE-2026-42550HIGHFlight: SQL Injection via unvalidated identifiers in SimplePdo::insert / update / deleteEPSS 0.4%CVE-2026-42548HIGHFlight: Reflected XSS via unvalidated JSONP callback in Flight::jsonp()EPSS 0.3%CVE-2026-42552HIGHFlight: Sensitive information disclosure via default error handler in flightphp/coreEPSS 0.3%CVE-2026-42551HIGHFlight: HTTP method override enabled by default enables CSRF escalation and middleware bypass in flightphp/coreEPSS 0.3%CVE-2026-42549MEDIUMFlight: Path traversal in `make:controller` CLI creates arbitrary directories outside project rootEPSS 0.2%