CVE-2017-11585

Name of the Vulnerable Software and Affected Versions FineCms version 5.0.9

Description The issue concerns remote PHP code execution via the param parameter in an "action=cache" request to "libraries/Template.php", which is an example of Eval Injection.

Recommendations For FineCms version 5.0.9, consider restricting access to the "libraries/Template.php" file to minimize the risk of exploitation, and avoid using the param parameter in the affected API endpoint until the issue is resolved.