Multiple SQL injection vulnerabilities in Fiyo CMS 2.0_1.9.1 allow remote malicious users to execute arbitrary SQL commands via the (1) id parameter to apps/app_article/controller/rating.php or (2) user parameter to user/login.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
fiyo fiyo cms 2.0.1.9.1 |