| Package | Affected versions | Patched versions |
|---|---|---|
| finecms | = 5.2.0 |
controllers/member/Api.php in dayrui FineCms 5.2.0 has SQL Injection: a request with s=member,c=api,m=checktitle, and the parameter 'module' with a SQL statement, lacks effective filtering.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free