CVE-2017-11419

Critical

Published: 18/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Fiyo CMS version 2.0.7 has SQL injection vulnerability in /apps/app_article/controller/editor.php via $_POST['id'] and $_POST['art_title'].

Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.

It is recommended to update Fiyo CMS to the latest version and implement input validation to prevent SQL injection.

Original NVD description (English source)

Fiyo CMS 2.0.7 has SQL injection in /apps/app_article/controller/editor.php via $_POST['id'] and $_POST['art_title'].