CVE Catalog
CVE-2017-11415
CriticalSummary
Fiyo CMS version 2.0.7 has an SQL injection vulnerability in dapur/apps/app_article/sys_article.php via $_POST['parent_id'], $_POST['desc'], $_POST['keys'], and $_POST['level'].
Risk Assessment
An attacker could exploit this vulnerability to execute unauthorized database queries, potentially leading to sensitive data disclosure or data manipulation.
Recommendation
It is recommended to update Fiyo CMS to the latest version and implement input filtering and validation in the application.
Original NVD description (English source)
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/sys_article.php via $_POST['parent_id'], $_POST['desc'], $_POST['keys'], and $_POST['level'].