CVE Catalog
CVE-2017-11413
CriticalSummary
Fiyo CMS version 2.0.7 has an SQL injection vulnerability in comment_status.php that uses the $_GET['id'] parameter.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.
Recommendation
It is recommended to update Fiyo CMS to the latest version and to validate and sanitize input data in the application.
Original NVD description (English source)
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/comment_status.php via $_GET['id'].