---
id: 3738
title: "FileFlows Vulnerabilities - SQL Injection by Decompiling .NET Code"
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/fileflows-sql-injection-by-decompiling-net-code/"
published_at: "2025-06-11 23:03"
tags: ["sql-injection", "vulnerability", "decompilation", "dotnet", "fileflows"]
phying_url: "https://phying.com/item/3738"
lang: en
---

# FileFlows Vulnerabilities - SQL Injection by Decompiling .NET Code

## Summary

Decompiling FileFlows' .NET binaries uncovered a SQL injection in the library-file search endpoint; simple quote replacement was insufficient to stop it on some supported databases.

## Intelligence Metadata

- **Sources:** projectblack.io
- **Published:** 2025-06-11 23:03
- **Original:** https://projectblack.io/blog/fileflows-sql-injection-by-decompiling-net-code/
- **Phying News:** https://phying.com/item/3738