CVE-2017-11178

CVE-2017-11178 is a high-severity vulnerability affecting FineCMS through 2017-07-11, allowing remote attackers to write to arbitrary files. This is due to insufficient validation of the 'contents' and 'filename' parameters in the 'route=style' action within application/core/controller/style.php, enabling attackers to overwrite files, including .php files, without extension checks. The vulnerability has a CVSS score of 7.5, indicating a network-based attack with low complexity and high impact on integrity. Despite its severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.