CVE-2020-17452

flatCore before 1.5.7 allows upload and execution of a .php file by an admin...

flatCore Unrestricted File Upload (CVE-2020-17452)

An unrestricted file upload vulnerability exists in flatCore. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-17452

The CVE-2020-17452 entry concerns flatCore CMS (PHP/SQLite) prior to version 1.5.7, where an unrestricted file upload vulnerability allows an admin to upload and execute a PHP file. The root cause is an unrestricted file upload flaw enabling remote code execution; impact details in sources indica...