CVE-2018-18545

The collected records confirm CVE-2018-18545 affects Fiyo CMS 2.0.7, with a Cross‑Site Scripting (XSS) vulnerability exposed via the name parameter in the file path dapur/apps/app_user/edit_user.php. The issue is documented as an XSS path in multiple sources (e.g., NVD and CNVD/CVE mirrors) and i...

CVE-2018-9162

Contec Smart Home 4.15 devices do not require authentication for newuser.php, edituser.php, deleteuser.php, and user.php, as demonstrated by changing the admin password and then obtaining control over doors...