CVE-2020-17452

Description

References

• lists.openwall.net/full-disclosure/2020/08/07/1 · Exploit
• sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-flatcore-cms · Exploit

Weitere Schwachstellen in flatcore

• CVE-2021-40555MITTEL 5.4Cross site scripting (XSS) vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via description field on the new …
• CVE-2021-23838MITTEL 4.8An issue was discovered in flatCore before 2.0.0 build 139. A reflected XSS vulnerability was identified in the media_filter HTTP request bo…
• CVE-2021-23837MITTEL 6.5An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selected_folder HTTP requ…
• CVE-2021-23836MITTEL 4.8An issue was discovered in flatCore before 2.0.0 build 139. A stored XSS vulnerability was identified in the prefs_smtp_psw HTTP request bod…
• CVE-2021-23835MITTEL 4.9An issue was discovered in flatCore before 2.0.0 build 139. A local file disclosure vulnerability was identified in the docs_file HTTP reque…