critical9.8
CVE-2017-11585
dayrui FineCms 5.0.9 has remote PHP code execution via the param parameter in an action=cache request to libraries/Template.php, aka Eval Injection.
Impact
dayrui FineCms 5.0.9 has remote PHP code execution via the param parameter in an action=cache request to libraries/Template.php, aka Eval Injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Finecms | Finecms | Version 5.0.9 |