CVE-2017-11582: Finecms

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

dayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php.

Affected products

• Finecms Finecms: up to and including 5.0.9

Published 2017-07-24. Last modified 2026-06-17.