332 matches found
CVE-2017-11581
dayrui FineCms 5.0.9 has Cross Site Scripting XSS in admin/Login.php via a payload in the username field that does not begin with a '' character...
Finecms foreground catid parameter has SQL injection vulnerability
FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. An SQL injection vulnerability exists in the frontend catid parameter of finecms. An attacker can exploit this vulnerability to obtain database information...
CVE-2017-11586
FineCMS 5.0.9 contains an open redirect vulnerability exploitable via the url parameter in a sync action, linked to controllers/Weixin.php. The NVD entry CVE-2017-11586 documents URL Redirector Abuse with CVSS 3.0 score 6.1 (NETWORK, PR:N, UI:R). Nuclei templates corroborate an open redirect cond...
CVE-2017-11582
CVE-2017-11582 concerns dayrui FineCms 5.0.9, with a SQL Injection vulnerability in the libraries/Template.php file. The flaw is exploitable via the num parameter in requests for action=related or action=tags, enabling a remote attacker to execute arbitrary SQL commands. Multiple sources in the c...
FineCms SQL Injection Vulnerability (CNVD-2017-18530)
FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A SQL injection vulnerability exists in FineCms version 5.0.9. A remote attacker can inject arbitrary SQL commands with the help of the 'field' parameter in an action=module, action=member,...
FineCms Remote Code Execution Vulnerability
FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A remote code execution vulnerability exists in FineCms version 5.0.9. A remote attacker can exploit this vulnerability to execute arbitrary PHP code with the help of the 'param' function in th...
SQL Injection Vulnerability in finecms Frontend Field Parameters
FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A SQL injection vulnerability exists in the frontend field parameter of finecms. An attacker can exploit this vulnerability to obtain database information...
CVE-2017-11586
dayrui FineCms 5.0.9 has URL Redirector Abuse via the url parameter in a sync action, related to controllers/Weixin.php...
FineCms SQL Injection Vulnerability (CNVD-2017-18532)
FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A SQL injection vulnerability exists in FineCms version 5.0.9. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...
CVE-2017-11583
dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php...
CVE-2017-11585
dayrui FineCms 5.0.9 has remote PHP code execution via the param parameter in an action=cache request to libraries/Template.php, aka Eval Injection...
FineCms Open Redirect Vulnerability
FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. An open redirection vulnerability exists in FineCms version 5.0.9. An attacker can exploit this vulnerability to redirect users to an arbitrary URL...
CVE-2017-11584
dayrui FineCms 5.0.9 is affected by an SQL Injection in the field parameter used in actions=module, action=member, action=form, or action=related, targeting libraries/Template.php. The vulnerability is described across multiple sources (NVD/CNVD/PRION/CVE lists) with no explicit public fix/versio...
FineCMS any url jump
No description provided by source...
FineCMS front Desk injection#2
No description provided by source...
FineCMS front Desk injection#3
No description provided by source...
FineCMS reflective xss
No description provided by source...
FineCMS front Desk unlimited getshell
No description provided by source...
