References https://www.cnblogs.com/LittleHann/p/4729648.html https://qkl.seebug.org/vuldb/ssvid-89404 https://cn-sec.com/archives/1038868.html https://cloud.tencent.com/developer/article/2274262 https://developer.aliyun.com/article/1246482 https://blog.csdn.net/qq_44906335/article/details/119417350 https://www.cnblogs.com/ichunqiu/p/7453208.html https://www.ddpoc.com/DVB-2022-3669.html http://wy.zone.ci/bug_detail.php?wybug_id=wooyun-2015-0105251
Related Vulnerabilitiesfinecms-sqli: FineCMS sqliPoCCVE-2017-11586: FineCMS <5.0.9 - Open RedirectPoCCVE-2017-11629: FineCMS <=5.0.10 - Cross-Site ScriptingPoCfinecms-sqli: FineCMS 5.0.10 - SQL InjectionFineCMS低于5.0.10存在XSS漏洞(CVE-2017-11629)FineCMS down_file 模块允许远程文件下载FineCMS v5.0.8 任意文件上传漏洞finecms 5.0.8 任意文件上传漏洞FIneCMS免费版 ofc_upload_image.php-文件上传漏洞finecms前台反射性xss漏洞FineCMS style.php-任意文件写入Finecms内容管理系统index.php-代码注入Finecms 任意文件下载