cve/CVE-2017-11629.md at 9ac4b787af2fa0b7575b28040edee6199ce9a667 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-28 01:04:30 +00:00

0xMarcio 48a00929ac Removed duplicates

2024-06-18 02:51:15 +02:00

678 B

Raw Blame History

CVE-2017-11629

Description

dayrui FineCms through 5.0.10 has Cross Site Scripting (XSS) in controllers/api.php via the function parameter in a c=api&m=data2 request.

POC

Reference

http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#api-php-Reflected-XSS

Github

https://github.com/ARPSyndicate/kenzer-templates