Description
In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and then execute code.
Unscored
CVE-2017-7625
EUVD-2017-16630GHSA-5h6w-56p3-f39c
In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and …
Published Apr 10, 2017 · Updated Aug 5, 2024 · Assigned by mitre