Security Advisory
CVE-2017-11585
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
dayrui FineCms 5.0.9 has remote PHP code execution via the param parameter in an action=cache request to libraries/Template.php, aka Eval Injection.