| Package | Affected versions | Patched versions |
|---|---|---|
| fiyo cms | = 2.0= 2.0.1.6= 2.0.1.8= 2.0.2.1= 2.0.6= 2.0.7 |
In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and then execute code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free