CVE-2011-5130

Name of the Vulnerable Software and Affected Versions Family Connections CMS (FCMS) versions 2.5.0 through 2.7.1

Description The issue allows remote attackers to execute arbitrary commands. This is possible when the register globals setting is enabled, and shell metacharacters are used in the argv[1] parameter.

Recommendations For Family Connections CMS (FCMS) versions 2.5.0 through 2.7.1, consider disabling the register globals setting to prevent exploitation. Additionally, restrict the use of the argv[1] parameter in the dev/less.php file until a patch is available.