Skip to content

CVE-2017-11413 Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/comment_status.php via $_GET['id'].

CriticalCVSS 9.8 EPSS 1.0%
Published
Updated
Exploit status
No public exploit known

Description

Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/comment_status.php via $_GET['id'].

Affected products

ProductAffected versionsFixed in
fiyo cms = 2.0.7 No fix listed

References

  • github.com issue-tracking patch third-party-advisory