Known Vulnerabilities for Flamecms by Flamecms Project
Listed below are 3 of the newest known vulnerabilities associated with "Flamecms" by "Flamecms Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-20797 json | FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php. | 9.8 - CRITICAL | 2021-09-30 | 2021-10-04 |
| CVE-2020-20796 json | FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter. | 9.8 - CRITICAL | 2021-09-30 | 2021-10-04 |
| CVE-2019-16309 json | FlameCMS 3.3.5 has SQL injection in account/login.php via accountName. | 9.8 - CRITICAL | 2019-09-14 | 2019-09-16 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Flamecms Project | Flamecms | 3.3.5 |