Browse CVEs

MEDIUM 5.4 CVE-2021-40555 Cross site scripting (XSS) vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via description field on the new page crea… Flatcore Patch available Fix from $1,6002023-02-16 MEDIUM 6.1 CVE-2022-43118 A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inj… Flatcore Cms No fix yet Fix from $1,6002022-11-09 HIGH 8.8 CVE-2021-41402 flatCore-CMS v2.0.8 has a code execution vulnerability, which could let a remote malicious user execute arbitrary PHP code. Flatcore Cms No fix yet Fix from $1,9502022-06-16 CRITICAL 9.8 CVE-2021-41403EPSS 19% flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities. Flatcore Cms Patch available Fix from $2,3002022-06-15 MEDIUM 5.4 CVE-2021-40902 flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the "Create New Page" option through the index page. Flatcore Cms No fix yet Fix from $1,6002022-06-13 MEDIUM 6.1 CVE-2021-42245 FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerability in pages.edit.php through meta tags and content sections. Flatcore Cms Patch available Fix from $1,6002022-06-06 MEDIUM 6.6 CVE-2021-3745 flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type Flatcore Cms 2.1.0+ Fix from $1,6002021-10-28 HIGH 7.2 CVE-2021-39608EPSS 46% Remote Code Execution (RCE) vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin, which could let a remote malicious user exeuct arb… Flatcore Cms No fix yet Fix from $1,9502021-08-23 MEDIUM 5.4 CVE-2021-39609 Cross Site Scripting (XSS) vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function. Flatcore Cms No fix yet Fix from $1,6002021-08-23 MEDIUM 6.5 CVE-2021-23837 An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selected_folder HTTP request body … Flatcore after 2.0.0 Fix from $1,6002021-01-15 HIGH 7.2 CVE-2020-17452 flatCore before 1.5.7 allows upload and execution of a .php file by an admin. Flatcore 1.5.7+ Fix from $1,9502020-08-09 HIGH 8.8 CVE-2019-13961 A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php files via acp/core/files.upload-script.php. Flatcore 1.5+ Fix from $1,9502019-07-18 HIGH 7.2 CVE-2019-10652EPSS 7% An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated administrators to upload arbitrary .php files, related to the addo… Flatcore No fix yet Fix from $1,9502019-03-30 MEDIUM 6.1 CVE-2017-1000428 flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of $_SERVER['PHP_SELF'] to build links and a stored XSS in th… Flatcore Cms Mitigation only Fix from $1,6002018-01-10 MEDIUM 6.1 CVE-2017-9451 Cross site scripting (XSS) vulnerability in pages.edit_form.php in flatCore 1.4.6 allows remote attackers to inject arbitrary JavaScript via the PATH… Flatcore Patch available Fix from $1,6002017-06-06 HIGH 7.5 CVE-2017-8868 acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk might be l… Flatcore Cms Patch available Fix from $1,9502017-05-10 CRITICAL 9.8 CVE-2017-7878 SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database. Flatcore Cms Patch available Fix from $2,3002017-04-14 HIGH 8.8 CVE-2017-7877 CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations. Flatcore Cms Patch available Fix from $1,9502017-04-14 HIGH 7.5 CVE-2017-7879 SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database. Flatcore Cms Patch available Fix from $1,9502017-04-14