Skip to content
OpenAdvisories
Unscored CVE-2017-2163 EUVD-2017-11346GHSA-q5f8-c7j3-9rwj

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shop_id.

Published May 12, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Nippon Institute of Agroinformatics Product: SOY CMS

Description

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shop_id.

Affected products

VendorProductAffectedFixed
Nippon Institute of Agroinformatics SOY CMS Ver.1.8.1 to Ver.1.8.12 —

References