CVE-2017-17102

Fiyo CMS version 2.0.7 has an arbitrary file read vulnerability in check_file.php that can be exploited via the $_GET['src'] or $_GET['name'] parameters.

Fiyo CMS version 2.0.7 has SQL injection vulnerability in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lead to escalation from normal user privileges to administrator privileges.

Fiyo CMS version 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup file in the .backup/ directory.

Fiyo CMS version 2.0.7 contains a vulnerability that allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter in a type=database request.

Fiyo CMS version 2.0.7 has an arbitrary file delete vulnerability in backuper.php via directory traversal in the file parameter during an act=db action.

Fiyo CMS version 2.0.6.1 allows remote authenticated users to gain elevated privileges via a modified level parameter in the app=user&act=edit action.

Fiyo CMS version 2.0.1.8 has multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. Attackers can exploit various parameters such as id, cat, user, level, email, and username to carry out an attack.

Fiyo CMS 2.0_1.9.1 has multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. The attack can be carried out via the 'id' parameter in rating.php or the 'user' parameter in the login process.

Fiyo CMS version 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the super administrator functions 'Install and Update' or 'Backup' via the view parameter in a direct request to fiyo/dapur.

Fiyo CMS version 2.0.7 has an SQL injection vulnerability in status.php that uses the id parameter.