critical9.8
CVE-2017-11582
dayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php.
Impact
dayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Finecms | Finecms | through 5.0.9 |