CVE-2019-13961

A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php files via acp/core/files.upload-script.php...

CVE-2019-13961: Cross-Site Request Forgery (CSRF)

A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php files via acp/core/files.upload-script.php...

PT-2019-13497

Name of the Vulnerable Software and Affected Versions flatCore versions prior to 1.5 Description A CSRF issue was discovered, allowing the upload of arbitrary .php files via the "acp/core/files.upload-script.php" endpoint. Recommendations For versions prior to 1.5, update to version 1.5 or later ...