Unrated severityNVD Advisory· Published Aug 30, 2012· Updated Apr 29, 2026
CVE-2011-5130
CVE-2011-5130
Description
dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter.
Affected products
8cpe:2.3:a:haudenschilt:family_connections_cms:2.5.0:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:haudenschilt:family_connections_cms:2.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:haudenschilt:family_connections_cms:2.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:haudenschilt:family_connections_cms:2.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:haudenschilt:family_connections_cms:2.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:haudenschilt:family_connections_cms:2.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:haudenschilt:family_connections_cms:2.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:haudenschilt:family_connections_cms:2.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:haudenschilt:family_connections_cms:2.7.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- sourceforge.net/apps/trac/fam-connections/ticket/407nvdExploit
- www.exploit-db.com/exploits/18198nvdExploit
- www.exploit-db.com/exploits/18208nvdExploit
- secunia.com/advisories/47069nvdVendor Advisory
- www.familycms.com/blog/2011/11/security-vulnerability-fcms-2-5-2-7-1/nvdVendor Advisory
- osvdb.org/77492nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/71618nvd
News mentions
0No linked articles in our index yet.