CVE-2017-7625

Critical

Published: 10/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In Fiyo CMS versions 2.x through 2.0.7, attackers may upload a webshell via the content parameter to '/dapur/apps/app_theme/libs/save_file.php', allowing code execution.

Risk Assessment

The ability to execute code remotely poses a serious threat to the security of the system and user data.

Recommendation

It is recommended to update Fiyo CMS to the latest version and implement appropriate security measures to block unauthorized file uploads.

Original NVD description (English source)

In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and then execute code.