flightphp vulnerabilities

Flight: Sensitive information disclosure via default error handler in flightphp/core

flightphp · core

Flight: HTTP method override enabled by default enables CSRF escalation and middleware bypass in flightphp/core

flightphp · core

Flight: SQL Injection via unvalidated identifiers in SimplePdo::insert / update / delete

flightphp · core

Flight: Path traversal in `make:controller` CLI creates arbitrary directories outside project root

flightphp · core

Flight: Reflected XSS via unvalidated JSONP callback in Flight::jsonp()

flightphp · core

Denial of Service (DoS) vulnerability in mikecao/flight

flightphp · core