CVE-2019-13961

2019-07-1820:15:12

Google

osv.dev

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.5%

JSON

A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php files via acp/core/files.upload-script.php.

CPENameOperatorVersion
flatcore-cmseq1.0
flatcore-cmseqReleaseCandidate2
flatcore-cmseq1.4beta3
flatcore-cmseq1.4beta2
flatcore-cmseq1.4.7-b75
flatcore-cmseqReleaseCandidate4
flatcore-cmseqReleaseCandidate3
flatcore-cmseqRC4v1
flatcore-cmseq1.4.7-b80
flatcore-cmseqVersion1.0

Name	Operator	Version
flatcore-cms	eq	1.0
flatcore-cms	eq	ReleaseCandidate2
flatcore-cms	eq	1.4beta3
flatcore-cms	eq	1.4beta2
flatcore-cms	eq	1.4.7-b75
flatcore-cms	eq	ReleaseCandidate4
flatcore-cms	eq	ReleaseCandidate3
flatcore-cms	eq	RC4v1
flatcore-cms	eq	1.4.7-b80
flatcore-cms	eq	Version1.0