CVE-2017-2163

HIGH

SOY CMS 1.8.1-1.8.12 - Authenticated Path Traversal via shop_id

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shop_id.

References (1)

Core 1
Core References
Third Party Advisory, VDB Entry third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN51819749/index.html

Scores

CVSS v3 7.5
EPSS 0.0248
EPSS Percentile 82.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-22
Status published
Products (13)
n-i-agroinformatics/soy_cms 1.8.1
n-i-agroinformatics/soy_cms 1.8.2
n-i-agroinformatics/soy_cms 1.8.3
n-i-agroinformatics/soy_cms 1.8.4
n-i-agroinformatics/soy_cms 1.8.5
n-i-agroinformatics/soy_cms 1.8.6
n-i-agroinformatics/soy_cms 1.8.7
n-i-agroinformatics/soy_cms 1.8.8
n-i-agroinformatics/soy_cms 1.8.9
n-i-agroinformatics/soy_cms 1.8.10
... and 3 more
Published May 12, 2017
Tracked Since Feb 18, 2026