FineCMS Pre-v5.0.9 Vulnerabilities Analysis: RCE, SQLi, XSS

Key Information FineCMS Multiple Vulnerabilities Overview Affected Versions: Versions prior to FineCMS v5.0.9 Vulnerability Types: Includes Remote Code Execution, SQL Injection, URL Redirection Abuse, and Cross-Site Scripting (XSS) CVE IDs: - CVE-2017-11581 - CVE-2017-11582 - CVE-2017-11583 - CVE-2017-11584 - CVE-2017-11585 - CVE-2017-11586 Vulnerability Details 1. URL Redirection Abuse: - Technical Description: The function in does not restrict redirection targets, allowing redirection to any URL. - PoC: 2. Reflected XSS: - Technical Description: The field in is echoed back on login failure. If DOM-based XSS is used, it bypasses filters and outputs directly. - PoC: 3. api.php Reflected XSS: - Technical Description: Parameters in the function of are output to the page without validation. - PoC: 4. SQL Injection via Parameter: - Technical Description: The parameter is split and inserted into SQL queries without validation. - PoC: 5. SQL Injection via Parameter: - Technical Description: The parameter is directly inserted into SQL queries without validation. - PoC: 6. SQL Injection via Parameter: - Technical Description: The parameter is directly inserted into SQL queries without validation. - PoC: 7. Remote PHP Code Execution: - Technical Description: In , some filters can be bypassed, allowing the parameter to be injected and executed via . - PoC:

Goal Reached Thanks to every supporter — we hit 100%!

FineCMS Pre-v5.0.9 Vulnerabilities Analysis: RCE, SQLi, XSS