Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selected_folder HTTP request body parameter for the acp interface. The affected parameter (which retrieves the file contents of the specified folder) was found to be accepting malicious user input without proper sanitization, thus leading to SQL injection. Database related information can be successfully retrieved.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
flatCore SQL注入漏洞
Vulnerability Description
flatCore是一套基于PHP和SQLite的轻量级内容管理系统（CMS）。 flatCore CMS 2.0.0 build 139版本之前存在SQL注入漏洞，该漏洞源于程序在接受恶意用户输入使没有对输入进行适当的检测，从而导致SQL注入，攻击者可利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A