FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php.
- https://github.com/FlameNET/FlameCMS/issues/26
No PoCs found on GitHub currently.