VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 12, 2018· Updated Jun 17, 2026

CVE-2018-6893

CVE-2018-6893

Description

controllers/member/Api.php in dayrui FineCms 5.2.0 has SQL Injection: a request with s=member,c=api,m=checktitle, and the parameter 'module' with a SQL statement, lacks effective filtering.

Affected products

3
  • Finecms Project/Finecmsinferred3 versions
    = 5.2.0+ 2 more
    • (no CPE)range: = 5.2.0
    • cpe:2.3:a:finecms:finecms:5.2.0:*:*:*:*:*:*:*
    • (no CPE)range: =5.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.