Critical severity9.8NVD Advisory· Published Jul 12, 2017· Updated May 13, 2026
CVE-2017-11167
CVE-2017-11167
Description
FineCMS 2.1.0 allows remote attackers to execute arbitrary PHP code by using a URL Manager "Add Site" action to enter this code after a ', sequence in a domain name, as demonstrated by the ',phpinfo() input value.
Affected products
1- cpe:2.3:a:finecms_project:finecms:2.1.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.03sec.com/3169.shtmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.