Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
flatcore flatcore-cms vulnerabilities and exploits
(subscribe to this query)
6.6
CVSSv3
CVE-2021-3745
flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type
Flatcore Flatcore-cms
8.8
CVSSv3
CVE-2017-7877
CSRF vulnerability in flatCore version 1.4.6 allows remote malicious users to modify CMS configurations.
Flatcore Flatcore-cms 1.4.6
9.8
CVSSv3
CVE-2017-7878
SQL Injection vulnerability in flatCore version 1.4.6 allows an malicious user to read and write to the users database.
Flatcore Flatcore-cms 1.4.6
7.5
CVSSv3
CVE-2017-7879
SQL Injection vulnerability in flatCore version 1.4.6 allows an malicious user to read the content database.
Flatcore Flatcore-cms 1.4.6
9.8
CVSSv3
CVE-2021-41403
flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities.
Flatcore Flatcore-cms 2.0.8
6.1
CVSSv3
CVE-2021-42245
FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerability in pages.edit.php through meta tags and content sections.
Flatcore Flatcore-cms 2.0.9
7.2
CVSSv3
CVE-2021-39608
Remote Code Execution (RCE) vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin, which could let a remote malicious user exeuct arbitrary php code.
Flatcore Flatcore-cms 2.0.7
5.4
CVSSv3
CVE-2021-40902
flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the "Create New Page" option through the index page.
Flatcore Flatcore-cms 2.0.8
5.4
CVSSv3
CVE-2021-39609
Cross Site Scripting (XSS) vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function.
Flatcore Flatcore-cms 2.0.7
7.5
CVSSv3
CVE-2017-8868
acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk might be limited to requests submitted through CSRF.
Flatcore Flatcore-cms 1.4.7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23692
CVE-2012-1823
memory leak
CVE-2024-0627
CVE-2024-31402
privilege escalation
CVE-2024-36418
remote code execution
CVE-2024-27844
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »