CVE-2021-23837

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selected_folder HTTP request body parameter for the acp interface. The affected parameter (which retrieves the file contents of the specified folder) was found to be accepting malicious user input without proper sanitization, thus leading to SQL injection. Database related information can be successfully retrieved.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/160936/flatCore-CMS-XSS-File-Disclosure-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/flatCore/flatCore-CMSProduct, Third Party Advisory
https://sec-consult.com/vulnerability-lab/Third Party Advisory
http://packetstormsecurity.com/files/160936/flatCore-CMS-XSS-File-Disclosure-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/flatCore/flatCore-CMSProduct, Third Party Advisory
https://sec-consult.com/vulnerability-lab/Third Party Advisory

Timeline

Published: Jan 15, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-238384.8An issue was discovered in flatCore before 2.0.0 build 139. A reflected XSS vulnerability was identified in the media_filter HTTP request bo CVE-2021-238393.7OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent CVE-2021-23844.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.25 an CVE-2021-238407.5Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input len CVE-2021-238415.9The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number d CVE-2021-238427.1Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blowfish. An attacker could retrie CVE-2021-238437.8The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC2 devices. The tool allows put CVE-2021-238458.8This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was CVE-2021-238465.9When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker CVE-2021-238479.1A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information CVE-2021-238486.1An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with CVE-2021-238498.8A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of a