dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php.
CVE Status: Modified
No CVSS data available
Exploit-db Github