Description
Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lead to escalation from normal user privileges to administrator privileges.
Unscored
CVE-2017-17103
EUVD-2017-8269GHSA-x439-2m4j-7jxg
Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lead to escalatio…
Published Dec 4, 2017 · Updated Aug 5, 2024 · Assigned by mitre