CVE-2017-11582

Critical

Published: 24/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

FineCms version 5.0.9 has an SQL Injection vulnerability via the num parameter in action=related or action=tags requests to libraries/Template.php.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update FineCms to the latest version that addresses this vulnerability and to implement input data filtering and validation.

Original NVD description (English source)

dayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php.