332 matches found
CVE-2017-11586
FineCMS 5.0.9 contains an open redirect vulnerability exploitable via the url parameter in a sync action, linked to controllers/Weixin.php. The NVD entry CVE-2017-11586 documents URL Redirector Abuse with CVSS 3.0 score 6.1 (NETWORK, PR:N, UI:R). Nuclei templates corroborate an open redirect cond...
CVE-2017-11584
dayrui FineCms 5.0.9 is affected by an SQL Injection in the field parameter used in actions=module, action=member, action=form, or action=related, targeting libraries/Template.php. The vulnerability is described across multiple sources (NVD/CNVD/PRION/CVE lists) with no explicit public fix/versio...
CVE-2017-11582
CVE-2017-11582 concerns dayrui FineCms 5.0.9, with a SQL Injection vulnerability in the libraries/Template.php file. The flaw is exploitable via the num parameter in requests for action=related or action=tags, enabling a remote attacker to execute arbitrary SQL commands. Multiple sources in the c...
CVE-2017-11581
CVE-2017-11581 affects dayrui FineCms 5.0.9 and is caused by a Cross Site Scripting (XSS) vulnerability in admin/Login.php, triggered by a username payload that does not begin with a '
FineCms Cross-Site Scripting Vulnerability
FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A cross-site scripting vulnerability exists in the admin/Login.php file in FineCms version 5.0.9. A remote attack can be exploited to inject arbitrary script code or HTML into the admin/Login.p...
FineCms SQL Injection Vulnerability (CNVD-2017-18531)
FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A SQL injection vulnerability exists in FineCms version 5.0.9. A remote attacker can exploit this vulnerability to obtain all databases with the help of the 'catid' parameter in the...
CVE-2017-11582
dayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php...
CVE-2017-11583
dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php...
CVE-2017-11584
dayrui FineCms 5.0.9 has SQL Injection via the field parameter in an action=module, action=member, action=form, or action=related request to libraries/Template.php...
CVE-2017-11586
dayrui FineCms 5.0.9 has URL Redirector Abuse via the url parameter in a sync action, related to controllers/Weixin.php...
FineCms Remote Code Execution Vulnerability
FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A remote code execution vulnerability exists in FineCms version 5.0.9. A remote attacker can exploit this vulnerability to execute arbitrary PHP code with the help of the 'param' function in th...
SQL Injection Vulnerability in finecms Frontend Field Parameters
FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A SQL injection vulnerability exists in the frontend field parameter of finecms. An attacker can exploit this vulnerability to obtain database information...
SQL Injection Vulnerability in finecms Frontend num Parameter
FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A SQL injection vulnerability exists in the frontend num parameter of finecms. An attacker can exploit this vulnerability to obtain database information...
FineCMS front Desk unlimited getshell
No description provided by source...
FineCMS front Desk injection#1
No description provided by source...
FineCMS reflective xss
No description provided by source...
FineCMS any url jump
No description provided by source...
FineCMS front Desk injection#2
No description provided by source...
