high7.2Public exploit code
CVE-2019-10652
An issue was discovered in flatCore 1.4.7.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- flatCore 1.5.5 - Arbitrary File Upload2025-04-10 · webapps · php
Impact
An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated administrators to upload arbitrary .php files, related to the addons feature.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flatcore | Flatcore | Version 1.4.7 |