FlatCMS 1.01 - 'file_editor.php' Remote Command Execution
!/usr/bin/perl FlatCMS All rights reserved. An input validation flaw exists within 'admin/fileeditor.php' of FlatCMS which can lead to remote command execution. Here is where the problem is line 22 of 97: ... 1 if$savefile != "" 2 $fcontent = stripslashes"$fcontent"; if!$fw = fopen$savefile, w ec...