Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2017-12774
Deferred
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-09 Aug, 2017 | 21:29
Updated At-20 Apr, 2025 | 01:37

finecms in 1.9.5\controllers\member\ContentController.php allows remote attackers to operate website database

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.09.8CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary2.07.5HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
CPE Matches

finecms_project
finecms_project
>>finecms>>1.9.5
cpe:2.3:a:finecms_project:finecms:1.9.5:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-89Primarynvd@nist.gov
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://github.com/yzcrnx/finecms/issues/1cve@mitre.org
Exploit
Third Party Advisory
https://github.com/yzcrnx/finecms/issues/1af854a3a-2127-422b-91ae-364da2661108
Exploit
Third Party Advisory
Change History
0Changes found

Details not found