197 matches found
Fiyo CMS SQL Injection Vulnerability (CNVD-2017-23895)
Fiyo CMS is a content management system CMS for creating CMS templates. A SQL injection vulnerability exists in the dapur/apps/appcomment/syscomment.php file in Fiyo CMS version 2.0.7. A remote attacker can exploit the vulnerability with $POST'comment', $POST'name', $POST'web', $POST'email',...
CVE-2017-11354
Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/apparticle/sysarticle.php via the name parameter in editing or adding a tag name...
CVE-2017-11354
Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/apparticle/sysarticle.php via the name parameter in editing or adding a tag name...
Sql injection
Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/apparticle/sysarticle.php via the name parameter in editing or adding a tag name...
CVE-2017-11354
Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/apparticle/sysarticle.php via the name parameter in editing or adding a tag name...
CVE-2017-11354
CVE-2017-11354 concerns Fiyo CMS v2.0.7, where an SQL injection exists in the vulnerable file dapur/apps/app_article/sys_article.php, exploitable via the name parameter when editing or adding a tag name. The underlying issue is a direct SQL injection without adequate input sanitization in the tag...
CVE-2017-8853
Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/appconfig/controller/backuper.php via directory traversal in the file parameter during an act=db action...
Directory traversal
Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/appconfig/controller/backuper.php via directory traversal in the file parameter during an act=db action...
CVE-2017-8853
Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/appconfig/controller/backuper.php via directory traversal in the file parameter during an act=db action...
CVE-2017-8853
Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/appconfig/controller/backuper.php via directory traversal in the file parameter during an act=db action...
CVE-2017-8853
CVE-2017-8853 affects Fiyo CMS 2.0.7. The vulnerability is in dapur/apps/app_config/controller/backuper.php, where a directory traversal in the file parameter (during an act=db action or type=database request) allows remote deletion of arbitrary files. The related entry CVE-2017-11630 describes a...
Fiyo CMS Arbitrary File Upload Vulnerability
Fiyo CMS is a content management system CMS for creating CMS templates. A security vulnerability exists in Fiyo CMS versions 2.x through 2.0.7. The vulnerability can be exploited by an attacker to execute code by sending the 'content' parameter to the file /dapur/apps/apptheme/libs/savefile.php...
Code injection
In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/apptheme/libs/savefile.php" and then execute code...
CVE-2017-7625
In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/apptheme/libs/savefile.php" and then execute code...
CVE-2017-7625
In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/apptheme/libs/savefile.php" and then execute code...
CVE-2017-7625
CVE-2017-7625 affects Fiyo CMS 2.x up to 2.0.7. An attacker can upload a webshell by sending the content parameter to /dapur/apps/app_theme/libs/save_file.php, enabling remote code execution. Multiple sources corroborate the same description (NVD, CNVD, CVE lists). The exact root cause is imprope...
CVE-2017-7625
In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/apptheme/libs/savefile.php" and then execute code...
FIYO CMS elevation of privilege vulnerability (CNVD-2017-04336)
Fiyo CMS is a content management system CMS for creating CMS templates. An elevation of privilege vulnerability exists in FIYO CMS version 2.0.6.1. An attacker can exploit the vulnerability to gain privileges by modifying parameters...
Fiyo CMS Elevation of Privilege Vulnerability
Fiyo CMS is a content management system CMS for creating CMS templates. An elevation of privilege vulnerability exists in Fiyo CMS version 2.0.6.1. An attacker can exploit this vulnerability to gain elevated privileges...