365 matches found
Server side request forgery (ssrf)
In FineCMS before 2017-07-06, application/lib/ajax/getimagedata.php has SSRF, related to requests for non-image files with a modified HTTP Host header...
CVE-2017-10973
In FineCMS before 2017-07-06, application/lib/ajax/getimagedata.php has SSRF, related to requests for non-image files with a modified HTTP Host header...
CVE-2017-10973
FineCMS before 2017-07-06 is affected by a server-side request forgery (SSRF) in application/lib/ajax/get_image_data.php, related to processing requests for non-image files with a modified HTTP Host header. Root cause appears to be improper handling of user-controlled Host header leading to unint...
CVE-2017-10967
Affected software: FineCMS (before 2017-07-06). Vulnerable component: application/core/controller/config.php. Vulnerability type: Cross-site scripting (XSS). Affected parameters: key_name, key_value, and meaning. Root cause / details: The available descriptions indicate that FineCMS allows XSS vi...
CVE-2017-10967
In FineCMS before 2017-07-06, application\core\controller\config.php allows XSS in the 1 keyname, 2 keyvalue, and 3 meaning parameters...
CVE-2017-10967: Improper Neutralization of Input During Web Page Generation
In FineCMS before 2017-07-06, application\core\controller\config.php allows XSS in the 1 keyname, 2 keyvalue, and 3 meaning parameters...
CVE-2017-10973: Server-Side Request Forgery (SSRF)
In FineCMS before 2017-07-06, application/lib/ajax/getimagedata.php has SSRF, related to requests for non-image files with a modified HTTP Host header...
Code Execution Vulnerability in FineCMS v5.0.8 Public Interest Edition Backend
FineCMS v5.0.8 is a cms for small and medium-sized websites developed by SkyRay programming team. FineCMS v5.0.8 public welfare version of the background there is a code execution vulnerability, remote attackers can take advantage of the vulnerability to insert code, and the code can be parsed...
Cross-site Scripting Vulnerability in FineCMS
FineCMS is a content management system based on PHP+MySql development A cross-site scripting vulnerability exists in the frontend message board of FineCMS version 5.0.8, due to the program failing to filter user-submitted data. An attacker can exploit this vulnerability to inject arbitrary Web...
finecms front Desk arbitrary file upload vulnerability #2
No description provided by source...
finecms arbitrary file upload 2
No description provided by source...
finecms front Desk members arbitrary file upload vulnerability #2
No description provided by source...
File upload vulnerability in finecms latest version v5.0.8
FineCMS is a content management system based on PHP+MySql. A file upload vulnerability exists in the ajaxupload function in Api.php in FineCMS version 5.0.8, which can be exploited by remote attackers to upload arbitrary files...
finecms front Desk arbitrary file upload vulnerability #3
No description provided by source...
finecms front Desk members arbitrary file upload vulnerability #1
No description provided by source...
finecms front Desk SQL injection
No description provided by source...
File upload vulnerability in finecms
FineCMS is a small and medium-sized content management system based on PHP+MySql+CI framework. File upload vulnerability exists in FineCMS. A file upload vulnerability exists in the newajaxupload function in \dayrui\controllers\member\Api.php, which can be exploited by an attacker to construct da...
finecms arbitrary file upload
No description provided by source...