Skip to content

Fiyo Cms vulnerabilities

fiyo cms In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack. CVE-2020-35373 6.1 MediumJune 17, 2021
fiyo cms Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter. CVE-2018-18545 6.1 MediumOctober 21, 2018
fiyo cms Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file... CVE-2017-17104 7.5 HighDecember 4, 2017
fiyo cms Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]... CVE-2017-17103 8.8 HighDecember 4, 2017
fiyo cms Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $_REQUEST['link']. CVE-2017-17102 7.5 HighDecember 4, 2017
fiyo cms Multiple SQL injection vulnerabilities in Fiyo CMS 2.0_1.9.1 allow remote attackers to execute... CVE-2015-3934 Public exploit 9.8 CriticalNovember 21, 2017
fiyo cms Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the ... CVE-2014-9148 Public exploit EPSS 11.4% 9.8 CriticalOctober 16, 2017
fiyo cms Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to... CVE-2014-9147 Public exploit EPSS 11.4% 7.5 HighOctober 16, 2017
fiyo cms Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter. CVE-2017-13778 6.1 MediumAugust 30, 2017
fiyo cms dapur/app/app_user/controller/status.php in Fiyo CMS 2.0.7 has SQL injection via the id parameter. CVE-2017-11631 9.8 CriticalJuly 26, 2017
fiyo cms dapur\apps\app_config\controller\backuper.php in Fiyo CMS 2.0.7 allows remote attackers to delete... CVE-2017-11630 7.5 HighJuly 26, 2017
fiyo cms Fiyo CMS 2.0.7 has SQL injection in /apps/app_article/controller/editor.php via $_POST['id'] and ... CVE-2017-11419 9.8 CriticalJuly 18, 2017
fiyo cms Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_list.php via $_GET[... CVE-2017-11418 9.8 CriticalJuly 18, 2017
fiyo cms Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_status.php via ... CVE-2017-11417 9.8 CriticalJuly 18, 2017
fiyo cms Fiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter. CVE-2017-11416 9.8 CriticalJuly 18, 2017
fiyo cms Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/sys_article.php via $_POST['parent_id'... CVE-2017-11415 9.8 CriticalJuly 18, 2017
fiyo cms Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/sys_comment.php via $_POST['comment'],... CVE-2017-11414 9.8 CriticalJuly 18, 2017
fiyo cms Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/comment_status.php via ... CVE-2017-11413 9.8 CriticalJuly 18, 2017
fiyo cms Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/controller/comment_status.php via ... CVE-2017-11412 9.8 CriticalJuly 18, 2017
fiyo cms Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/app_article/sys_article.php via... CVE-2017-11354 9.8 CriticalJuly 17, 2017
fiyo cms Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/app_config/controller... CVE-2017-8853 7.5 HighMay 9, 2017
fiyo cms In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "... CVE-2017-7625 9.8 CriticalApril 10, 2017
fiyo cms Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level... CVE-2017-6823 Public exploit 8.8 HighMarch 12, 2017
fiyo cms Multiple cross-site scripting (XSS) vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to... CVE-2014-9146 Public exploit 4.3 MediumApril 14, 2015
fiyo cms Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute... CVE-2014-9145 Public exploit 7.5 HighApril 14, 2015
fiyo cms Cross-site scripting (XSS) vulnerability in apps/app_comment/form_comment.php in Fiyo CMS 1.5.7... CVE-2014-4032 4.3 MediumJune 11, 2014