All packages
flatCore 1.4.6 vulnerabilities
4 known CVE vulnerabilities in flatCore 1.4.6, translated and rated.
- CVE-2017-8868High
The acp/core/files.browser.php in flatCore 1.4.7 has a vulnerability that allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk might be limited to requests submitted through CSRF.
- CVE-2017-7879High
SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database.
- CVE-2017-7877High
CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.
- CVE-2017-7878Critical
SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.