critical9.8
CVE-2017-7625
In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and then execute code.
Impact
In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and then execute code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fiyo | Fiyo Cms | Versions 2.0, 2.0.1.6, 2.0.1.8, 2.0.2.1, 2.0.6, 2.0.7 |