CVE-2017-7878
CriticalSummary
SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.
Risk Assessment
This vulnerability may lead to unauthorized access to user data and its modification, which can have serious consequences for the organization's security.
Recommendation
It is recommended to update flatCore to the latest version to eliminate this vulnerability and implement additional security measures against SQL Injection attacks.
Other vulnerabilities in flatCore 1.4.6
See all- CVE-2017-8868High
The acp/core/files.browser.php in flatCore 1.4.7 has a vulnerability that allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk might be limited to requests submitted through CSRF.
- CVE-2017-7879High
SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database.
- CVE-2017-7877High
CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.
Original NVD description (English source)
SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.