CVE-2011-5130

CVE-2011-5130 describes a remote command execution vulnerability in Family Connections CMS (FCMS) versions 2.5.0 through 2.7.1, specifically within the dev/less.php component. When register_globals is enabled, attackers can inject shell metacharacters into the argv[1] parameter to execute arbitrary commands. This vulnerability has a CVSS score of 6.8 (medium severity) with a network attack vector, medium attack complexity, and potential for partial confidentiality, integrity, and availability impact. While not in the KEV catalog, exploit modules are publicly available in Metasploit and ExploitDB, indicating readily accessible exploit code, though there is no evidence of active exploitation or significant community discussion.