197 matches found
EUVD-2017-3046
Malware in sbrugna...
EUVD-2017-3040
Malware in sbrugna...
EUVD-2018-10267
Malware in sbrugna...
EUVD-2017-15877
Malware in sbrugna...
CVE-2020-35373
In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack...
CVE-2017-8853
Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/appconfig/controller/backuper.php via directory traversal in the file parameter during an act=db action...
SUSE CVE-2017-11354
Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/apparticle/sysarticle.php via the name parameter in editing or adding a tag name...
SUSE CVE-2017-11630
dapur\apps\appconfig\controller\backuper.php in Fiyo CMS 2.0.7 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter in a type=database request, a different vulnerability than CVE-2017-8853...
SUSE CVE-2017-11631
dapur/app/appuser/controller/status.php in Fiyo CMS 2.0.7 has SQL injection via the id parameter...
Fiyo CMS Cross-Site Scripting Vulnerability (CNVD-2021-45303)
Fiyo CMS is a content management system and software that allows users to add and/or manipulate change website content. A cross-site scripting vulnerability exists in the tag parameter in Fiyo CMS version 2.0.6.1. An attacker can exploit this vulnerability to add html/JavaScript to html code...
CVE-2020-35373
In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack...
CVE-2020-35373
In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack...
Cross site scripting
In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack...
CVE-2020-35373
In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack...
CVE-2020-35373
CVE-2020-35373 affects Fiyo CMS 2.0.6.1, where the untrusted input in the tag parameter leads to an unauthenticated cross-site scripting (XSS) vulnerability. The impact described in sources is the ability to inject HTML/JavaScript via that parameter. Exploitation details are not provided beyond t...
PT-2021-11758 · Fiyo Cms · Fiyo Cms
Name of the Vulnerable Software and Affected Versions: Fiyo CMS version 2.0.6.1 Description: The issue allows for an unauthenticated XSS attack. This occurs due to the tag parameter being vulnerable. Recommendations: For Fiyo CMS version 2.0.6.1, avoid using the tag parameter in affected areas...
Fiyo CMS 跨站脚本漏洞
Fiyo CMS is a content management system and software that allows users to add and/or manipulate change website content. A cross-site scripting vulnerability exists in the tag parameter in Fiyo CMS version 2.0.6.1. An attacker can exploit this vulnerability to add html/JavaScript to html code...
Fiyo CMS Cross Site Scripting (CVE-2018-18545)
A cross site scripting vulnerability exists in Fiyo CMS. Successful exploitation of this vulnerability could allow the remote attacker to execute an arbitrary code on the affected system...
Fiyo CMS Cross-Site Scripting Vulnerability (CNVD-2018-21626)
Fiyo CMS is a content management system CMS for creating CMS templates. A cross-site scripting vulnerability exists in the dapur\apps\appuser\edituser.php page in Fiyo CMS version 2.0.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the 'name'...