CVE-2017-11583
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php.
Affected Platforms (CPE)
📦
Finecms
Back to CVE Browser
Related Vulnerabilities
CVE-2017-115849.8
dayrui FineCms 5.0.9 has SQL Injection via the field parameter in an action=module, action=member, action=form, or action=related ...
CVE-2017-109689.8
In FineCMS through 2017-07-07, application\core\controller\template.php allows remote PHP code execution by placing the code after...
CVE-2017-115829.8
dayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php...
CVE-2017-115859.8
dayrui FineCms 5.0.9 has remote PHP code execution via the param parameter in an action=cache request to libraries/Template.php, a...