CVE-2017-11354

Critical

Published: 17/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Fiyo CMS version 2.0.7 has an SQL injection vulnerability in sys_article.php via the name parameter when editing or adding a tag name.

Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.

It is recommended to update Fiyo CMS to the latest version and to validate and sanitize input data to prevent SQL injection.

Original NVD description (English source)

Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/app_article/sys_article.php via the name parameter in editing or adding a tag name.