EUVD-2017-2834

Malware in sbrugna...

FineCMS 1.0 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: FineCMS 1.0 Multiple Vulnerabilities Dork: N/A Date: 29.08.2017 Vendor Homepage : http://mvc.net.pl/ Software Link: https://github.com/andrzuk/FineCMS Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Explo...

CVE-2017-11200: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in FineCMS through 2017-07-12 via the application/core/controller/excludes.php visitorip parameter...

PT-2017-11818

Name of the Vulnerable Software and Affected Versions FineCMS versions prior to 2017-07-12 Description A SQL Injection issue exists via the visitor ip parameter in the application/core/controller/excludes.php file. Recommendations For FineCMS versions prior to 2017-07-12, avoid using the visitor ...

FineCMS multi vulnerablity

Reflected XSS in getimage.php Technical Description: file /application/lib/ajax/getimage.php the $POST'id' and $POST'name' and $GET'folder' without any validated, sanitised or output encoded. Proof of ConceptPoC http://yourfinecms/application/lib/ajax/getimage.php?folder=1 POST: id=1"alert1&name=...