Family Connections Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-5130)

Description

dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter.

Remediation

References

CVE-2011-5130

Related Vulnerabilities

WordPress Plugin WordPress Console Security Bypass (0.3.9)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-1029)

WordPress Plugin SpiderCatalog Unspecified Vulnerability (1.6.8)

WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (6.4.2)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4569)

Severity

Medium

Classification

CVE-2011-5130 CWE-94