PT-2017-11998

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0.7 Description The issue concerns SQL injection. It can be exploited via the name parameter in the /apps/app comment/controller/insert.php API endpoint. Recommendations For Fiyo CMS version 2.0.7, avoid using the name...