PT-2017-14715

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0.7 Description The issue allows for arbitrary file read in the dapur/apps/app theme/libs/check file.php file via the src or name variables in the $ GET request. Recommendations For Fiyo CMS version 2.0.7, consider restricti...