CVE-2017-7879
HighSummary
SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database.
Risk Assessment
The organization may be exposed to unauthorized access to data, potentially leading to information leakage.
Recommendation
It is recommended to update flatCore to the latest version to mitigate this vulnerability.
Other vulnerabilities in flatCore 1.4.6
See all- CVE-2017-8868High
The acp/core/files.browser.php in flatCore 1.4.7 has a vulnerability that allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk might be limited to requests submitted through CSRF.
- CVE-2017-7877High
CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.
- CVE-2017-7878Critical
SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.
Original NVD description (English source)
SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database.