Known Vulnerabilities for products from Flamecms Project
Listed below are 3 of the newest known vulnerabilities associated with the vendor "Flamecms Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-20797 json | FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php. | 9.8 - CRITICAL | 2021-09-30 | 2021-10-04 |
| CVE-2020-20796 json | FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter. | 9.8 - CRITICAL | 2021-09-30 | 2021-10-04 |
| CVE-2019-16309 json | FlameCMS 3.3.5 has SQL injection in account/login.php via accountName. | 9.8 - CRITICAL | 2019-09-14 | 2019-09-16 |
Known software with vulnerabilities from Flamecms Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Flamecms Project | Flamecms | 3.3.5 |