CVE-2017-13697

Mô tả

Tham khảo

• bendawang.site/article/The-latest-version-of-finecms-unlimited-XSS · Third Party Advisory

Lỗ hổng khác của finecms

• CVE-2017-1000429TRUNG BÌNH 6.1rui Li finecms 5.0.10 is vulnerable to a reflected XSS in the file Weixin.php.
• CVE-2017-14195TRUNG BÌNH 6.1The call_msg function in controllers/Form.php in dayrui FineCms 5.0.11 might have XSS related to the Referer HTTP header with Internet Explo…
• CVE-2017-14194TRUNG BÌNH 6.1The out function in controllers/member/Login.php in dayrui FineCms 5.0.11 has XSS related to the Referer HTTP header with Internet Explorer.
• CVE-2017-14193TRUNG BÌNH 6.1The oauth function in controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the Referer HTTP header with Internet Explorer.
• CVE-2017-14192TRUNG BÌNH 6.1The checktitle function in controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the module field.