CVE-2017-7878

2017-04-1418:59:01

Google

osv.dev

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.2%

JSON

SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.

CPENameOperatorVersion
flatcore-cmseq1.4beta3
flatcore-cmseqRC4v2
flatcore-cmseq1.4beta4
flatcore-cmseq1.4.5
flatcore-cmseq1.4beta2
flatcore-cmseqReleaseCandidate3
flatcore-cmseqReleaseCandidate4
flatcore-cmseq1.0
flatcore-cmseqVersion1.0
flatcore-cmseq1.3

Name	Operator	Version
flatcore-cms	eq	1.4beta3
flatcore-cms	eq	RC4v2
flatcore-cms	eq	1.4beta4
flatcore-cms	eq	1.4.5
flatcore-cms	eq	1.4beta2
flatcore-cms	eq	ReleaseCandidate3
flatcore-cms	eq	ReleaseCandidate4
flatcore-cms	eq	1.0
flatcore-cms	eq	Version1.0
flatcore-cms	eq	1.3

Rows per page:

1-10 of 171

References

github.com/flatCore/flatCore-CMS/issues/29