PT-2017-14636

Name of the Vulnerable Software and Affected Versions FineCms version 5.2.0 Description The issue allows remote attackers to upload arbitrary .php files. This is possible due to a default SYS KEY value in the v5/config/system.php file, which does not require key regeneration for each installation...