CVE-2017-12774: Finecms Project Finecms

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

finecms in 1.9.5\controllers\member\ContentController.php allows remote attackers to operate website database

Affected products

• Finecms Project Finecms: version 1.9.5 only

Published 2017-08-09. Last modified 2026-06-17.