CVE-2017-2163

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shop_id.

Score

CVSS 3.0 7.5 High

Status

Modified - vultures@jpcert.or.jp

Published

2017-05-12

Last modified

2024-08-05

Weaknesses

CWE-22

Affected products

• Soy Cms (N-i-agroinformatics)
• Soy Cms (Nippon Institute Of Agroinformatics Ltd.)

References

• http://jvn.jp/en/jp/JVN51819749/index.html