Ftcms vulnerabilities
We track 2 vulnerabilities in Ftcms products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 9, 2025.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Ftcms vulnerabilities
- 7.2 High severity
ftcms: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in ftcms 2.1. Affected is an unknown function of the file /admin/index.php/web/ajax_all_lists of the component Search. The manipulation of the argument name leads to sql injection. It is possible to launch
- 8.8 High severity
Ftcms: Cross-Site Request Forgery
In ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server (correspondin