Shardulm94

**Name of the Vulnerable Software and Affected Versions** flatCore version 1.4.6 **Description** A CSRF issue allows remote attackers to modify CMS configurations. **Recommendations** For flatCore version 1.4.6, update to a version that includes a fix for this issue, if available. If no specific fix is provided for version 1.4.6, consider implementing additional security measures to prevent CSRF attacks, such as validating request tokens.

**Name of the Vulnerable Software and Affected Versions** flatCore version 1.4.6 **Description** The issue allows an attacker to read and write to the users database through a SQL Injection vulnerability. **Recommendations** For flatCore version 1.4.6, update to a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** flatCore version 1.4.6 **Description** The issue allows an attacker to read the content database due to a SQL Injection vulnerability. **Recommendations** For flatCore version 1.4.6, update to a newer version that contains a fix for this issue, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability.