2 matches found
Code injection
FineCMS 2.1.0 allows remote attackers to execute arbitrary PHP code by using a URL Manager "Add Site" action to enter this code after a ', sequence in a domain name, as demonstrated by the ',phpinfo input value...
7.5CVSS9.7AI score0.01524EPSS
SaveExploits1References1Affected Software1
CVE-2017-11167
FineCMS 2.1.0 allows remote attackers to execute arbitrary PHP code by using a URL Manager "Add Site" action to enter this code after a ', sequence in a domain name, as demonstrated by the ',phpinfo input value...
9.8CVSS9.7AI score0.01524EPSS
SaveExploits1References1
20