CVE-2011-5130

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 36.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-08-30 · updated 2026-06-16
Weakness: CWE-94

Description

dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter.

Affected products

Haudenschilt Family Connections Cms: 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.6.0 (+2)

References

http://osvdb.org/77492
http://secunia.com/advisories/47069
http://sourceforge.net/apps/trac/fam-connections/ticket/407
http://www.exploit-db.com/exploits/18198
http://www.exploit-db.com/exploits/18208
https://exchange.xforce.ibmcloud.com/vulnerabilities/71618
https://www.familycms.com/blog/2011/11/security-vulnerability-fcms-2-5-2-7-1/
http://osvdb.org/77492
http://secunia.com/advisories/47069
http://sourceforge.net/apps/trac/fam-connections/ticket/407
http://www.exploit-db.com/exploits/18198
http://www.exploit-db.com/exploits/18208

Get alerted when CVE-2011-5130 or the next vulnerability affects your stack