Design/Logic Flaw

2017-07-2400:29:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.6%

dayrui FineCms 5.0.9 has remote PHP code execution via the param parameter in an action=cache request to libraries/Template.php, aka Eval Injection.

CPENameOperatorVersion
finecmseq5.0.9

CPE	Name	Operator	Version
	finecms	eq	5.0.9

References

lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/