CVE-2017-2163

CVE-2017-2163 affects SOY CMS versions 1.8.1–1.8.12. A directory traversal flaw arises from flawed processing of the shop_id parameter, allowing authenticated attackers to read arbitrary files on the server and potentially execute arbitrary PHP code. Remediation is to update to the latest SOY CMS...

CVE-2017-2163

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shopid...

SOY CMS vulnerable to directory traversal

Overview SOY CMS provided by Nippon Institute of Agroinformatics Ltd. is a Contents Management System CMS. SOY CMS contains a directory traversal vulnerability CWE-22 due to a flaw in processing shopid parameter. ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the develope...