CVE-2017-11415

CVE-2017-11415 affects Fiyo CMS 2.0.7. The vulnerability is a SQL injection in dapur/apps/app_article/sys_article.php, exploitable via unsanitized input from $_POST['parent_id'], $_POST['desc'], $_POST['keys'], and $_POST['level']. The issue, confirmed by multiple connected records, allows an att...

CVE-2017-11354

CVE-2017-11354 concerns Fiyo CMS v2.0.7, where an SQL injection exists in the vulnerable file dapur/apps/app_article/sys_article.php, exploitable via the name parameter when editing or adding a tag name. The underlying issue is a direct SQL injection without adequate input sanitization in the tag...

CVE-2017-11354

Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/apparticle/sysarticle.php via the name parameter in editing or adding a tag name...