CVE Catalog
CVE-2017-2163
HighSummary
Directory traversal vulnerability in SOY CMS versions 1.8.1 to 1.8.12 allows authenticated attackers to read arbitrary files via shop_id.
Risk Assessment
Attackers may gain access to sensitive data, potentially leading to further attacks on the system or exposure of confidential information.
Recommendation
It is recommended to update SOY CMS to the latest version to eliminate this vulnerability and to monitor logs for unauthorized access attempts.
Other vulnerabilities in SOY CMS
Original NVD description (English source)
Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shop_id.