CVE-2017-10968

In FineCMS through 2017-07-07, application\core\controller\template.php allows remote PHP code execution by placing the code after "<?php" in a route=template request.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-07-07

Last modified

2024-08-05

Weaknesses

CWE-94

Affected products

• Finecms (Finecms Project)

References

• http://www.yuesec.com/img/cccccve/finecms_codeexec/finecmscodeexec_2017_07_06_submit.html