PT-2017-12141

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0.7 Description The issue allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter in a type=database request to the /dapur/apps/app config/controller/backuper.php endpoint...

CVE-2017-11630: Improper Limitation of a Pathname to a Restricted Directory

dapur\apps\appconfig\controller\backuper.php in Fiyo CMS 2.0.7 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter in a type=database request, a different vulnerability than CVE-2017-8853...

Directory traversal

Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/appconfig/controller/backuper.php via directory traversal in the file parameter during an act=db action...

CVE-2017-8853

Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/appconfig/controller/backuper.php via directory traversal in the file parameter during an act=db action...

CVE-2017-8853

Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/appconfig/controller/backuper.php via directory traversal in the file parameter during an act=db action...

CVE-2017-8853: Improper Limitation of a Pathname to a Restricted Directory

Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/appconfig/controller/backuper.php via directory traversal in the file parameter during an act=db action...

PT-2017-18583

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0.7 Description The issue concerns an arbitrary file delete vulnerability. It is located in the dapur/apps/app config/controller/backuper.php file via directory traversal in the file parameter during an act=db action...