Sql injection

Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $REQUEST'link'...

CVE-2017-17102: Improper Neutralization of Special Elements used in an SQL Command

Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $REQUEST'link'...

PT-2017-14713

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0.7 Description The issue concerns SQL injection. It can be exploited via the /system/site.php API endpoint, specifically through the link variable in the $ REQUEST array. Recommendations For Fiyo CMS version 2.0.7, consider...