Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
fiyo fiyo cms vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2020-35373
In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.
Fiyo Fiyo Cms 2.0.6.1
4.3
CVSSv2
CVE-2018-18545
Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.
Fiyo Fiyo Cms 2.0.7
6.5
CVSSv2
CVE-2017-17103
Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lead to escalation from normal user privileges to administrator privileges.
Fiyo Fiyo Cms 2.0.7
5
CVSSv2
CVE-2017-17102
Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $_REQUEST['link'].
Fiyo Fiyo Cms 2.0.7
7.8
CVSSv2
CVE-2017-17104
Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file.php via $_GET['src'] or $_GET['name'].
Fiyo Fiyo Cms 2.0.7
7.5
CVSSv2
CVE-2015-3934
Multiple SQL injection vulnerabilities in Fiyo CMS 2.0_1.9.1 allow remote malicious users to execute arbitrary SQL commands via the (1) id parameter to apps/app_article/controller/rating.php or (2) user parameter to user/login.
Fiyo Fiyo Cms 2.0.1.9.1
1 EDB exploit
5
CVSSv2
CVE-2014-9147
Fiyo CMS 2.0.1.8 allows remote malicious users to obtain sensitive information via a direct request to the database backup file in .backup/.
Fiyo Fiyo Cms
1 EDB exploit
7.5
CVSSv2
CVE-2014-9148
Fiyo CMS 2.0.1.8 allows remote malicious users to bypass intended access restrictions and execute the (1) "Install and Update" or (2) Backup super administrator function via the view parameter in a direct request to fiyo/dapur.
Fiyo Fiyo Cms
1 EDB exploit
4.3
CVSSv2
CVE-2017-13778
Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter.
Fiyo Fiyo Cms 2.0.7
5
CVSSv2
CVE-2017-11630
dapur\apps\app_config\controller\backuper.php in Fiyo CMS 2.0.7 allows remote malicious users to delete arbitrary files via directory traversal sequences in the file parameter in a type=database request, a different vulnerability than CVE-2017-8853.
Fiyo Fiyo Cms 2.0.7
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »