Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
flatcore flatcore-cms vulnerabilities and exploits
(subscribe to this query)
4
CVSSv2
CVE-2021-23835
An issue exists in flatCore prior to 2.0.0 build 139. A local file disclosure vulnerability was identified in the docs_file HTTP request body parameter for the acp interface. This can be exploited with admin access rights. The affected parameter (which retrieves the contents of t...
Flatcore Flatcore
3.5
CVSSv2
CVE-2021-23836
An issue exists in flatCore prior to 2.0.0 build 139. A stored XSS vulnerability was identified in the prefs_smtp_psw HTTP request body parameter for the acp interface. An admin user can inject malicious client-side script into the affected parameter without any form of input san...
Flatcore Flatcore
4
CVSSv2
CVE-2021-23837
An issue exists in flatCore prior to 2.0.0 build 139. A time-based blind SQL injection was identified in the selected_folder HTTP request body parameter for the acp interface. The affected parameter (which retrieves the file contents of the specified folder) was found to be accep...
Flatcore Flatcore
4.3
CVSSv2
CVE-2017-1000428
flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of $_SERVER['PHP_SELF'] to build links and a stored XSS in the admin log panel by specifying a malformed User-Agent string.
Flatcore Flatcore-cms 1.4.6
5
CVSSv2
CVE-2017-8868
acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk might be limited to requests submitted through CSRF.
Flatcore Flatcore-cms 1.4.7
6.8
CVSSv2
CVE-2017-7877
CSRF vulnerability in flatCore version 1.4.6 allows remote malicious users to modify CMS configurations.
Flatcore Flatcore-cms 1.4.6
7.5
CVSSv2
CVE-2017-7878
SQL Injection vulnerability in flatCore version 1.4.6 allows an malicious user to read and write to the users database.
Flatcore Flatcore-cms 1.4.6
5
CVSSv2
CVE-2017-7879
SQL Injection vulnerability in flatCore version 1.4.6 allows an malicious user to read the content database.
Flatcore Flatcore-cms 1.4.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27802
template injection
CVE-2024-0044
code injection
CVE-2024-35474
CVE-2024-27857
CVE-2024-23251
CVE-2024-23692
physical
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2