Description

dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter.

Remediation

References

CVE-2011-5130

Related Vulnerabilities

SharePoint CVE-2024-21426 Vulnerability (CVE-2024-21426)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-47125)

Joomla Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2011-4907)

WordPress Plugin ALO EasyMail Newsletter Cross-Site Request Forgery (2.6.01)

XWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2023-34466)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-94 CVE-2011-5130