Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2017-2163 Details

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shop_id.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://jvn.jp/en/jp/JVN51819749/index.html	CVE	Third Party AdvisoryVDB Entry
http://jvn.jp/en/jp/JVN51819749/index.html	[email protected]	Third Party AdvisoryVDB Entry

CWE-ID	CWE Name	Source
CWE-22	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')	[email protected]

Product	Versions
n-i-agroinformatics soy cms	1.8.1 1.8.2 1.8.3 1.8.4 1.8.5
CPE cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.1:::::::* cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.2:::::::* cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.3:::::::* cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.4:::::::* cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.5:::::::* cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.6:::::::* cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.7:::::::* cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.8:::::::* cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.9:::::::* cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.10:::::::* cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.11:::::::* cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.12:::::::* Remediation No remediation found in references.

Product

Versions

n-i-agroinformatics soy cms

1.8.1

1.8.2

1.8.3

1.8.4

1.8.5

5 change records found show changes

QUICK INFO