CVE-2011-5130

MEDIUM 6.8CVE-2011-5130 · Published 30/08/2012 · updated 16/06/2026

Package	Affected versions	Patched versions
family connections cms haudenschilt	`= 2.5.0= 2.5.1= 2.5.2= 2.5.3= 2.5.4= 2.6.0= 2.7.0= 2.7.1`	No fix yet

Description

dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter.

References

osvdb.org/77492
secunia.com/advisories/47069 · Vendor Advisory
sourceforge.net/apps/trac/fam-connections/ticket/407 · Exploit
exploit-db.com/exploits/18198 · Exploit
exploit-db.com/exploits/18208 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/71618
familycms.com/blog/2011/11/security-vulnerability-fcms-2-5-2-7-1 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free