CVE-2017-7877
HighSummary
CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.
Risk Assessment
Attackers can make unauthorized changes to the content management system configuration, potentially leading to serious security breaches.
Recommendation
It is recommended to update to the latest version of flatCore to mitigate this vulnerability.
Other vulnerabilities in flatCore 1.4.6
See all- CVE-2017-8868High
The acp/core/files.browser.php in flatCore 1.4.7 has a vulnerability that allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk might be limited to requests submitted through CSRF.
- CVE-2017-7879High
SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database.
- CVE-2017-7878Critical
SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.
Original NVD description (English source)
CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.