CVE Catalog
CVE-2017-11631
CriticalSummary
Fiyo CMS version 2.0.7 has an SQL injection vulnerability in status.php that uses the id parameter.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to update Fiyo CMS to the latest version and to validate and sanitize input data in the application.
Original NVD description (English source)
dapur/app/app_user/controller/status.php in Fiyo CMS 2.0.7 has SQL injection via the id parameter.