Skip to content

CVE-2017-7878 SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.

CriticalCVSS 9.8 EPSS 1.0%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.

Affected products

ProductAffected versionsFixed in
flatcore-cms = 1.4.6 No fix listed

References

  • github.com issue-tracking patch third-party-advisory