Description

dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter.

Remediation

References

CVE-2011-5130

Related Vulnerabilities

WordPress Plugin WP Courses LMS Cross-Site Scripting (2.0.43)

WordPress Plugin Build App Online SQL Injection (1.0.18)

WordPress Plugin Ultimate Membership Pro SQL Injection (3.3)

b2evolution Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-5910)

MediaWiki Use of Insufficiently Random Values Vulnerability (CVE-2023-22912)

Severity

Medium

Classification

CVE-2011-5130 CWE-94

Tags

Missing Update Known Vulnerabilities