CVE-2017-11412

Critical

Published: 18/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Fiyo CMS version 2.0.7 has an SQL injection vulnerability in comment_status.php via the $_GET['id'] parameter.

Exploitation of this vulnerability could lead to unauthorized access to the database and exposure of sensitive information.

It is recommended to update Fiyo CMS to the latest version and to validate and sanitize input data in the application.

Original NVD description (English source)

Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/controller/comment_status.php via $_GET['id'].