Flatcore-Cms

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. Remote Code Execution (RCE) vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin, which could let a remote malicious user exeuct arbitrary php code.CVE-2021-39608Flatcore · 46% likely

   CWE-434

2. flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities.CVE-2021-41403Flatcore · 19% likely

   CWE-918

3. acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk might be limited to requests submitted t…CVE-2017-8868Flatcore · 1.9% likely

   CWE-22

4. Cross Site Scripting (XSS) vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function.CVE-2021-39609Flatcore · 1.7% likely

   CWE-79

5. flatCore-CMS v2.0.8 has a code execution vulnerability, which could let a remote malicious user execute arbitrary PHP code.CVE-2021-41402Flatcore · 1.5% likely

   CWE-94

6. SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database.CVE-2017-7879Flatcore · 1.0% likely

   CWE-89

7. SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.CVE-2017-7878Flatcore · 1.0% likely

   CWE-89

8. CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.CVE-2017-7877Flatcore · 0.9% likely

   CWE-352

9. flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of $_SERVER['PHP_SELF'] to build links and a stored XSS in the admin log panel by specifyin…CVE-2017-1000428Flatcore · 0.8% likely

   CWE-79

10. FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerability in pages.edit.php through meta tags and content sections.CVE-2021-42245Flatcore · 0.7% likely

    CWE-79

11. A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username text f…CVE-2022-43118Flatcore · CVSS 6.1 · 0.5% likely

    CWE-79

12. flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the "Create New Page" option through the index page.CVE-2021-40902Flatcore · 0.5% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.