CVE-2017-7625 in CMSinfo

Summary

In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and then execute code.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

04/10/2017

Disclosure

04/10/2017

Entries

1

CPE

ready

CWE

CWE-94

CVSS

8.5

EPSS

0.01364

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2017-7625
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2017-7625
CVE Detailshttps://www.cvedetails.com/cve/CVE-2017-7625/

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!