EUVD-2017-15877

Malware in sbrugna...

CVE-2017-6823

Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit action...

CVE-2017-6823

CVE-2017-6823 affects Fiyo CMS 2.0.6.1. A remote authenticated user can gain privileges by manipulating the level parameter in dapur/ (app=user&act=edit), abusing the system’s user-group handling to escalate access. Exploit references exist (Exploit-DB, PRION). No patch details are provided in th...