EDB-41594

PoC

Fiyo CMS 2.0.6.1 - Privilege Escalation

view exploit source exploit_dbtype webappsauthor rungga_reksyapublished 2017-03-11catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2017-6823UShigh8.8OT highExploit
Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit action.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan