CVE-2017-11416

Critical

Published: 18/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Fiyo CMS version 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.

It is recommended to update Fiyo CMS to the latest version to mitigate this vulnerability and implement input data filtering.

Original NVD description (English source)

Fiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter.