CVE-2014-9146

Multiple cross-site scripting XSS vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to inject arbitrary web script or HTML via the 1 view, 2 id, 3 page, or 4 app parameter to the default URI or the 5 act parameter to dapur/index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to inject arbitrary web script or HTML via the 1 view, 2 id, 3 page, or 4 app parameter to the default URI or the 5 act parameter to dapur/index.php...

CVE-2014-9145

Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...

Sql injection

Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...

CVE-2014-9145

CVE-2014-9145 refers to multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8. The NVD and related records show injectable parameters across dapur/index.php (edit action id), and in dapur/apps/app_article/controller/article_list.php (cat, user, level), and dapur/apps/app_user/controller/chec...

CVE-2014-9146

Multiple cross-site scripting XSS vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to inject arbitrary web script or HTML via the 1 view, 2 id, 3 page, or 4 app parameter to the default URI or the 5 act parameter to dapur/index.php...

CVE-2014-9146

CVE-2014-9146 affects Fiyo CMS 2.0.1.8 with multiple XSS vulnerabilities exploitable via the default URI parameters (view, id, page, app) or the act parameter to dapur/index.php. The connected documents confirm a remote XSS impact, with PoC/advisories noting XSS alongside other issues (SQLi, URL ...

CVE-2014-9145

Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...

Multiple SQL Injection Vulnerabilities in Fiyo CMS

Fiyo CMS is small business phone service and mobile collaboration tool. Fiyo CMS has multiple SQL injection vulnerabilities. The vulnerabilities can be exploited by an attacker to gain access to sensitive database information...

Fiyo CMS Direct URL Access Vulnerability

Fiyo CMS is small business phone service and mobile collaboration tool. A direct URL access vulnerability exists in Fiyo CMS. An attacker could exploit the vulnerability to perform unauthorized actions...

Fiyo CMS Access Control Bypass Vulnerability

Fiyo CMS is small business phone service and mobile collaboration tool. Fiyo CMS suffers from access control bypass vulnerabilities. An attacker could exploit these vulnerabilities to perform unauthorized operations...

Fiyo CMS Reflective Cross-Site Scripting Vulnerability

Fiyo CMS is small business phone service and mobile collaboration tool. A reflected cross-site scripting vulnerability exists in Fiyo CMS. An attacker can exploit the vulnerability to execute arbitrary script code in the context of an affected browser...

Fiyo CMS 'Name' POST Parameter Cross-Site Scripting Vulnerability

Fiyo CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-4032

Cross-site scripting XSS vulnerability in apps/appcomment/formcomment.php in Fiyo CMS 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the Nama field...

CVE-2014-4032

CVE-2014-4032 affects Fiyo CMS 1.5.7; XSS via the Nama field in apps/app_comment/form_comment.php. The exploit could inject script/HTML; CVSSv2 base score 4.3 (MEDIUM). No remediation details are provided in the supplied documents.

CVE-2014-4032

Cross-site scripting XSS vulnerability in apps/appcomment/formcomment.php in Fiyo CMS 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the Nama field...

Fiyo CMS 1.5.7 Cross Site Scripting

Exploit Title: Fiyo CMS 1.5.7 XSS Vulnerability Date: 05/29/2014 Author: Mustafa ALTINKAYNAK Download URL :http://www.fiyo.org/ Software Link: http://www.fiyo.org/download Vuln Category: CWE-79 XSS Tested on: Fiyo CMS 1.5.7 Tested Local Platform : XAMP on Windows Patch/ Fix: Not published...