CVE-2017-11417

Critical

Published: 18/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Fiyo CMS version 2.0.7 has an SQL injection vulnerability in article_status.php that uses the $_GET['id'] parameter.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.

It is recommended to update Fiyo CMS to the latest version and implement input filtering and validation.

Original NVD description (English source)

Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_status.php via $_GET['id'].