CVE-2021-23837

An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selectedfolder HTTP request body parameter for the acp interface. The affected parameter which retrieves the file contents of the specified folder was found to be accepting malicious...

PT-2021-15558

Name of the Vulnerable Software and Affected Versions: flatCore versions prior to 2.0.0 build 139 Description: A time-based blind SQL injection issue was identified in the selected folder HTTP request body parameter for the acp interface. This parameter, which retrieves the file contents of the...