critical9.8
CVE-2017-11584
dayrui FineCms 5.0.9 has SQL Injection via the field parameter in an action=module, action=member, action=form, or action=related request to libraries/Template…
Impact
dayrui FineCms 5.0.9 has SQL Injection via the field parameter in an action=module, action=member, action=form, or action=related request to libraries/Template.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Finecms | Finecms | through 5.0.9 |