CVE-2017-10968

CVE-2017-10968 is a critical remote PHP code execution vulnerability affecting FineCMS through version 2017-07-07. An unauthenticated attacker can exploit this flaw by injecting malicious PHP code into the "route=template" request parameter, leading to full compromise of the affected system. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with no user interaction, resulting in high impact to confidentiality, integrity, and availability. Despite its severity, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.