365 matches found
CVE-2017-11585
CVE-2017-11585 affects dayrui FineCMS 5.0.9 with remote PHP code execution through the param parameter in an action=cache request to libraries/Template.php, described as Eval Injection. The vulnerability allows an attacker to inject and execute arbitrary PHP code on the server. Exploitation and e...
CVE-2017-11582
dayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php...
CVE-2017-11585
dayrui FineCms 5.0.9 has remote PHP code execution via the param parameter in an action=cache request to libraries/Template.php, aka Eval Injection...
CVE-2017-11583
dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php...
FineCms Open Redirect Vulnerability
FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. An open redirection vulnerability exists in FineCms version 5.0.9. An attacker can exploit this vulnerability to redirect users to an arbitrary URL...
FineCms SQL Injection Vulnerability (CNVD-2017-18532)
FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A SQL injection vulnerability exists in FineCms version 5.0.9. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...
CVE-2017-11584
dayrui FineCms 5.0.9 is affected by an SQL Injection in the field parameter used in actions=module, action=member, action=form, or action=related, targeting libraries/Template.php. The vulnerability is described across multiple sources (NVD/CNVD/PRION/CVE lists) with no explicit public fix/versio...
FineCms Remote Code Execution Vulnerability
FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A remote code execution vulnerability exists in FineCms version 5.0.9. A remote attacker can exploit this vulnerability to execute arbitrary PHP code with the help of the 'param' function in th...
CVE-2017-11582: Improper Neutralization of Special Elements used in an SQL Command
dayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php...
CVE-2017-11584: Improper Neutralization of Special Elements used in an SQL Command
dayrui FineCms 5.0.9 has SQL Injection via the field parameter in an action=module, action=member, action=form, or action=related request to libraries/Template.php...
SQL Injection Vulnerability in finecms Frontend Field Parameters
FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A SQL injection vulnerability exists in the frontend field parameter of finecms. An attacker can exploit this vulnerability to obtain database information...
CVE-2017-11586
dayrui FineCms 5.0.9 has URL Redirector Abuse via the url parameter in a sync action, related to controllers/Weixin.php...
FineCMS any url jump
No description provided by source...
FineCMS front Desk injection#3
No description provided by source...
FineCMS front Desk unlimited getshell
No description provided by source...
FineCMS front Desk injection#2
No description provided by source...
FineCMS reflective xss
No description provided by source...
FineCMS front Desk injection#1
No description provided by source...
CVE-2017-11198
Cross-site scripting XSS vulnerability in /application/lib/ajax/getimage.php in FineCMS through 2017-07-12 allows remote attackers to inject arbitrary web script or HTML via the folder, id, or name parameter...