← All advisories

High severity8.8NVD Advisory· Published Jul 18, 2019· Updated Jun 17, 2026

CVE-2019-13961

CVE-2019-13961

Description

A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php files via acp/core/files.upload-script.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Flatcore/Flatcore CMS2 versions
cpe:2.3:a:flatcore:flatcore:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:flatcore:flatcore:*:*:*:*:*:*:*:*range: <1.5
- (no CPE)range: <1.5
flatCore/flatCoredescription

Patches

Vulnerability mechanics

References

2

github.com/flatCore/flatCore-CMS/issues/39nvdExploitThird Party Advisory
github.com/flatCore/flatCore-CMS/compare/35fee64...de90af3nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.