CyberSec.Space Logo
Back to CVE Browser

CVE-2011-5130

MEDIUM
6.8
CVSS Severity Score
EPSS Score0.1670%
EPSS Percentile22.99th
PublishedAug 30, 2012
Last ModifiedApr 29, 2026

Vulnerability Description

dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter.

Affected Platforms (CPE)

📦
Haudenschilt

Family Connections Cms

= 2.5.0
📦
Haudenschilt

Family Connections Cms

= 2.5.1
📦
Haudenschilt

Family Connections Cms

= 2.5.2
📦
Haudenschilt

Family Connections Cms

= 2.5.3
📦
Haudenschilt

Family Connections Cms

= 2.5.4
📦
Haudenschilt

Family Connections Cms

= 2.6.0
📦
Haudenschilt

Family Connections Cms

= 2.7.0
📦
Haudenschilt

Family Connections Cms

= 2.7.1

References & Advisories

🔗 http://osvdb.org/77492
🔗 http://secunia.com/advisories/47069
🔗 http://sourceforge.net/apps/trac/fam-connections/ticket/407
🔗 http://www.exploit-db.com/exploits/18198
🔗 http://www.exploit-db.com/exploits/18208
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/71618
🔗 https://www.familycms.com/blog/2011/11/security-vulnerability-fcms-2-5-2-7-1/
🔗 http://osvdb.org/77492

Related Vulnerabilities

CVE-2012-06998.8

Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow remote attac...

CVE-2010-34197.5

Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote attackers to e...

CVE-2008-29016.5

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.4 allow remote authenticated users to execu...

CVE-2009-20106.5

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authenticated us...