Monday, December 4, 2017

CVE-2017-17103

Description. Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lead to escalation from normal user privileges to administrator privileges. Source: MITRE Last Modified: 12/04/2017 ...

from Google Alert - vulnerability http://ift.tt/2nrZZKj
via IFTTT

No comments:

Post a Comment