Skip to content
OpenAdvisories

Product · rathena

FluxCP

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2025-62797

    CSRF in FluxCP account endpoints allows account takeover / state-changing actions

    FluxCP is a web-based Control Panel for rAthena servers written in PHP. A critical Cross-Site Request Forgery (CSRF) vulnerability exists in the FluxCP-based website template used by multiple rAthena/Ragnarok servers. State-changing POST endpoints accept brow…

    rathena FluxCP
  • High 7.3
    CVE-2024-45799

    Javascript Injection in Vending Info/Buyers Info Module in FluxCP

    FluxCP is a web-based Control Panel for rAthena servers written in PHP. A javascript injection is possible via venders/buyers list pages and shop names, that are currently not sanitized. This allows executing arbitrary javascript code on the user's browser ju…

    rathena FluxCP