CVE-2017-17103

Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]

published December 4, 2017

CVSS
—
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lead to escalation from normal user privileges to administrator privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01181 · 67.3th percentile
Published
2017-12-04T08:00Z
EPSS history
Timeline
  • 04 DEC 08:00Z
    Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]
    cvelistv5