183 matches found
Sql injection
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/apparticle/controller/articlestatus.php via $GET'id'...
CVE-2017-11419
Fiyo CMS 2.0.7 has SQL injection in /apps/apparticle/controller/editor.php via $POST'id' and $POST'arttitle'...
CVE-2017-11412
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/appcomment/controller/commentstatus.php via $GET'id'...
CVE-2017-11414
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/appcomment/syscomment.php via $POST'comment', $POST'name', $POST'web', $POST'email', $POST'status', $POST'id', and $REQUEST'id'...
Sql injection
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/apparticle/sysarticle.php via $POST'parentid', $POST'desc', $POST'keys', and $POST'level'...
CVE-2017-11415
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/apparticle/sysarticle.php via $POST'parentid', $POST'desc', $POST'keys', and $POST'level'...
Sql injection
Fiyo CMS 2.0.7 has SQL injection in /apps/appcomment/controller/insert.php via the name parameter...
Sql injection
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/apparticle/controller/articlelist.php via $GET'cat', $GET'user', $GET'level', and $GET'iSortCol'.$i...
Sql injection
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/appcomment/controller/commentstatus.php via $GET'id'...
CVE-2017-11413
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/apparticle/controller/commentstatus.php via $GET'id'...
CVE-2017-11414
Fiyo CMS 2.0.7 is affected by a SQL injection in dapur/apps/app_comment/sys_comment.php, exploitable via $_POST['comment'], $_POST['name'], $_POST['web'], $_POST['email'], $_POST['status'], $_POST['id'], and $_REQUEST['id']. The CVE entry is corroborated across multiple sources (NVD/CVE records, ...
CVE-2017-11415
CVE-2017-11415 affects Fiyo CMS 2.0.7. The vulnerability is a SQL injection in dapur/apps/app_article/sys_article.php, exploitable via unsanitized input from $_POST['parent_id'], $_POST['desc'], $_POST['keys'], and $_POST['level']. The issue, confirmed by multiple connected records, allows an att...
CVE-2017-11412
CVE-2017-11412 affects Fiyo CMS 2.0.7. A SQL injection vulnerability exists in dapur/apps/app_comment/controller/comment_status.php reachable via $_GET['id']; the vulnerability is documented across multiple sources (NVD, CVE records, CNVD) and allows arbitrary SQL execution. No exploits or remedi...
CVE-2017-11416
CVE-2017-11416 : Fiyo CMS 2.0.7 contains an SQL injection in /apps/app_comment/controller/insert.php via the name parameter. Multiple connected sources (NVD, CVE lists, CNVD, PoIs) corroborate that a remote attacker can leverage this to execute arbitrary SQL commands. Exploitation status is not d...
CVE-2017-11414
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/appcomment/syscomment.php via $POST'comment', $POST'name', $POST'web', $POST'email', $POST'status', $POST'id', and $REQUEST'id'...
CVE-2017-11416
Fiyo CMS 2.0.7 has SQL injection in /apps/appcomment/controller/insert.php via the name parameter...
CVE-2017-11419
The CVE-2017-11419 entry affects Fiyo CMS 2.0.7, with a SQL injection in /apps/app_article/controller/editor.php exploitable via POST parameters $_POST['id'] and $_POST['art_title']. The underlying issue is unsanitized input leading to arbitrary SQL execution, as indicated by the NVD/NVD-derived ...
CVE-2017-11413
CVE-2017-11413 affects Fiyo CMS version 2.0.7, with a SQL injection in the file dapur/apps/app_article/controller/comment_status.php that can be triggered via the HTTP GET parameter $_GET['id']. The connected documents consistently describe the vulnerability path and target file, confirming an un...