CVE Catalog
CVE-2017-11583
CriticalSummary
FineCms version 5.0.9 has a SQL Injection vulnerability via the catid parameter in an action=related request to libraries/Template.php.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.
Recommendation
It is recommended to update FineCms to the latest version and to validate and sanitize input data in the application.
Original NVD description (English source)
dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php.