File upload vulnerability in finecms

FineCMS is a small and medium-sized content management system based on PHP+MySql+CI framework. File upload vulnerability exists in FineCMS. A file upload vulnerability exists in the newajaxupload function in \dayrui\controllers\member\Api.php, which can be exploited by an attacker to construct da...

Multiple File Upload and Arbitrary Code Execution Vulnerabilities in FineCMS

FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. FineCMS has multiple file upload and arbitrary code execution vulnerabilities. finecms\dayrui\controllers\member\Api.php in the downfile and swfupload functions of the file upload vulnerability...