Description
FineCMS 2.1.0 allows remote attackers to execute arbitrary PHP code by using a URL Manager "Add Site" action to enter this code after a ', sequence in a domain name, as demonstrated by the ',phpinfo() input value.
Unscored
CVE-2017-11167
EUVD-2017-2802GHSA-cvx3-834p-cj35
FineCMS 2.1.0 allows remote attackers to execute arbitrary PHP code by using a URL Manager "Add Site" action to enter this code after a ', …
Published Jul 12, 2017 · Updated Aug 5, 2024 · Assigned by mitre