CVE-2017-8853

Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/appconfig/controller/backuper.php via directory traversal in the file parameter during an act=db action...

CVE-2017-8853

Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/appconfig/controller/backuper.php via directory traversal in the file parameter during an act=db action...

CVE-2017-8853

CVE-2017-8853 affects Fiyo CMS 2.0.7. The vulnerability is in dapur/apps/app_config/controller/backuper.php, where a directory traversal in the file parameter (during an act=db action or type=database request) allows remote deletion of arbitrary files. The related entry CVE-2017-11630 describes a...