Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-16920

v5/config/system.php in dayrui FineCms 5.2.0 has a default SYS_KEY value and does not require key regeneration for each installation, which allows remote attackers to upload arbitrary .php files via a member api swfupload action to index.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.3%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2017-16920
  • Finecms » Finecms » Version: 5.2.0
    cpe:2.3:a:finecms:finecms:5.2.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved