漏洞描述
【漏洞对象】FineCMS 【涉及版本】<=5.0.8 【漏洞描述】 该系统down_file函数，可以从远程下载文件到本地服务器，导致任意文件下载漏洞。
FineCMS5.0.8-任意文件下载获得Shell
PoC代码
暂无相关漏洞推荐
- POC CVE-2022-42889: Text4Shell - Remote Code Execution
- POC CVE-2009-0545: ZeroShell <= 1.0beta11 Remote Code Execution
- POC CVE-2014-2321: ZTE Cable Modem Web Shell
- POC CVE-2014-6271: ShellShock - Remote Code Execution
- POC CVE-2017-11586: FineCMS <5.0.9 - Open Redirect
- POC CVE-2017-11629: FineCMS <=5.0.10 - Cross-Site Scripting
- POC CVE-2019-8943: WordPress Core 5.0.0 - Crop-image Shell Upload
- POC CVE-2020-16846: SaltStack <=3002 - Shell Injection
- POC CVE-2021-24347: WordPress SP Project & Document Manager <4.22 - Authenticated Shell Upload
- POC CVE-2023-34124: SonicWall GMS and Analytics Web Services - Shell Injection
- POC CVE-2025-53770: Microsoft SharePoint Server - Remote Code Execution (ToolShell)
- POC CVE-2014-6271: ShellShock - Remote Code Execution
- POC CVE-2020-16846: SaltStack Shell Injection