Lucene search
PRIOn knowledge basePRION:CVE-2021-23837HistoryJan 15, 2021 - 7:15 a.m.
Sql injection
2021-01-1507:15:00
PRIOn knowledge base
www.prio-n.com
2
An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selected_folder HTTP request body parameter for the acp interface. The affected parameter (which retrieves the file contents of the specified folder) was found to be accepting malicious user input without proper sanitization, thus leading to SQL injection. Database related information can be successfully retrieved.
Related
cve
cve
CVE-2021-23837
2021-01-15 07:15:14
nvd
nvd
CVE-2021-23837
2021-01-15 07:15:14
cvelist
cvelist
CVE-2021-23837
2021-01-15 06:27:23
packetstorm
packetstorm
flatCore CMS XSS / File Disclosure / SQL Injection
2021-01-13 00:00:00