CVE-2020-17451

概要

参考情報

• lists.openwall.net/full-disclosure/2020/08/07/1 · Exploit
• sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-flatcore-cms · Exploit

flatcore のその他の脆弱性

• CVE-2021-40555中 5.4Cross site scripting (XSS) vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via description field on the new …
• CVE-2021-23838中 4.8An issue was discovered in flatCore before 2.0.0 build 139. A reflected XSS vulnerability was identified in the media_filter HTTP request bo…
• CVE-2021-23837中 6.5An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selected_folder HTTP requ…
• CVE-2021-23836中 4.8An issue was discovered in flatCore before 2.0.0 build 139. A stored XSS vulnerability was identified in the prefs_smtp_psw HTTP request bod…
• CVE-2021-23835中 4.9An issue was discovered in flatCore before 2.0.0 build 139. A local file disclosure vulnerability was identified in the docs_file HTTP reque…