CVE-2017-6823 Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit action.
HighCVSS 8.8
EPSS 8.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fiyo cms | = 2.0.6.1 | No fix listed |
References
- rungga.blogspot.co.id third-party-advisory
- 96889 third-party-advisory vdb-entry
- 41594 exploit third-party-advisory vdb-entry