Back to feed
EUVD-2017-17795 · Published May 9, 2017
Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/app_config/controller/backuper.php via directory traversal in the file parameter during an act=db action.
Technologies
Fiyo Fiyo Cms
Weaknesses
CWE-22
CVSS scores
- v3.07.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - v2.06.4
AV:N/AC:L/Au:N/C:N/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
