CVE-2017-17103

概要

参考情報

• FiyoCMS/FiyoCMS · Exploit

fiyo cms のその他の脆弱性

• CVE-2020-35373中 6.1In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.
• CVE-2018-18545中 6.1Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.
• CVE-2017-17104高 7.5Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file.php via $_GET['src'] or $_GET['name'].
• CVE-2017-17102高 7.5Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $_REQUEST['link'].
• CVE-2015-3934緊急 9.8Multiple SQL injection vulnerabilities in Fiyo CMS 2.0_1.9.1 allow remote attackers to execute arbitrary SQL commands via the (1) id paramet…