CVE-2017-11584

Critical

Published: 24/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

FineCms version 5.0.9 has a SQL Injection vulnerability via the field parameter in requests with actions module, member, form, or related to the libraries/Template.php file.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update FineCms to the latest version to eliminate this vulnerability and implement input data filtering in the application.

Original NVD description (English source)

dayrui FineCms 5.0.9 has SQL Injection via the field parameter in an action=module, action=member, action=form, or action=related request to libraries/Template.php.