TI-2025-38980 CVE-2025-62797
CSRF in FluxCP account endpoints allows account takeover / state-changing actions
Priority HIGH 72
FluxCP is a web-based Control Panel for rAthena servers written in PHP.
rathena
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
rathena records in CISA KEVNo rathena vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2026-80310 CVE-2026-116254 · GHSA-2869-hc7g-hw5v
Origin validation error in rathena FluxCP PayPal IPN handler
Priority HIGH 70
A vulnerability was identified in rathena FluxCP up to 98cd4b8fd83228c11b36fb3d097b8e0f7c105a8d.
Priority MEDIUM 50
rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server.
TI-2025-36206 CVE-2025-58448
rAthena has SQL Injection in PartyBooking component via `WorldName` parameter.
Priority MEDIUM 49
rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server.
Priority MEDIUM 45
rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server.
Priority LOW 34
FluxCP is a web-based Control Panel for rAthena servers written in PHP.
Priority LOW 33
rAthena is an open-source cross-platform MMORPG server.
TI-2022-04042 CVE-2022-4421 · GHSA-6mv6-789j-fmx4
rAthena FluxCP Service Desk Image URL view.php cross site scripting
Priority LOW 28
A vulnerability was found in rAthena FluxCP.