183 matches found
Fiyo CMS 2.0.2.1 Cross Site Scripting
Introduction Affected Product: Fiyo CMS 2.0.2.1 Fixed in: Fiyo CMS 2.0.6 Fixed Version Link: http://www.fiyo.org/blog/versi-2-0-6-banyak-perubahan-untuk-stabilitas Vendor Website: http://www.fiyo.org/ Vulnerability Type: Persistent XSS Remote Exploitable: Yes Reported to vendor: 28/12/2015 Fixed...
Fiyo CMS SQL Injection Vulnerability
Fiyo CMS is a content management system CMS for creating CMS templates. A SQL injection vulnerability exists in Fiyo CMS that stems from the program failing to adequately filter user-submitted input before constructing SQL query statements. An attacker could use this vulnerability to compromise t...
Fiyo CMS 2.0_1.9.1 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Fiyo CMS multiple SQL vulnerability Date: 2015-06-28 Exploit Author: cfreer poc-lab Vendor Homepage: http://www.fiyo.org/ Software Link: http://tcpdiag.dl.sourceforge.net/project/fiyo-cms/Fiyo%202.0/fiyocms2.0.2.zip Version:...
Fiyo CMS 2.0_1.9.1 - SQL Injection
Fiyo CMS 2.01.9.1 - SQL Injection Exploit Title: Fiyo CMS multiple SQL vulnerability Date: 2015-06-28 Exploit Author: cfreer poc-lab Vendor Homepage: http://www.fiyo.org/ Software Link: http://tcpdiag.dl.sourceforge.net/project/fiyo-cms/Fiyo%202.0/fiyocms2.0.2.zip Version: 2.01.9.1 Tested on:...
Fiyo CMS 2.0_1.9.1 - SQL Injection
Exploit Title: Fiyo CMS multiple SQL vulnerability Date: 2015-06-28 Exploit Author: cfreer poc-lab Vendor Homepage: http://www.fiyo.org/ Software Link: http://tcpdiag.dl.sourceforge.net/project/fiyo-cms/Fiyo%202.0/fiyocms2.0.2.zip Version: 2.01.9.1 Tested on: Apache/2.4.7 Win32 CVE : CVE-2015-393...
Fiyo CMS 2.0_1.9.1 SQL Injection
Exploit Title: Fiyo CMS multiple SQL vulnerability Date: 2015-06-28 Exploit Author: cfreer poc-lab Vendor Homepage: http://www.fiyo.org/ Software Link: http://tcpdiag.dl.sourceforge.net/project/fiyo-cms/Fiyo%202.0/fiyocms2.0.2.zip Version: 2.01.9.1 Tested on: Apache/2.4.7 Win32 CVE : CVE-2015-393...
Fiyo-cms 2.018 /dapur/index.php SQL注入漏洞
漏洞链接： http://localhost/fiyo/dapur/index.php?app=user&act=edit&id=1sqli Parameter: id Type: UNION query Title: MySQL UNION query NULL - 10 columns Payload: app=user&act=edit&id=-1874 UNION ALL SELECT NULL,NULL,CONCAT0x7171676471,0x66457070464452786c58,0x716a767471,NULL,NULL,NULL,NULL,NULL,NULL,NUL...
CVE-2014-9146
Multiple cross-site scripting XSS vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to inject arbitrary web script or HTML via the 1 view, 2 id, 3 page, or 4 app parameter to the default URI or the 5 act parameter to dapur/index.php...
Sql injection
Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to inject arbitrary web script or HTML via the 1 view, 2 id, 3 page, or 4 app parameter to the default URI or the 5 act parameter to dapur/index.php...
CVE-2014-9145
Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...
CVE-2014-9145
CVE-2014-9145 refers to multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8. The NVD and related records show injectable parameters across dapur/index.php (edit action id), and in dapur/apps/app_article/controller/article_list.php (cat, user, level), and dapur/apps/app_user/controller/chec...
CVE-2014-9146
Multiple cross-site scripting XSS vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to inject arbitrary web script or HTML via the 1 view, 2 id, 3 page, or 4 app parameter to the default URI or the 5 act parameter to dapur/index.php...
CVE-2014-9146
CVE-2014-9146 affects Fiyo CMS 2.0.1.8 with multiple XSS vulnerabilities exploitable via the default URI parameters (view, id, page, app) or the act parameter to dapur/index.php. The connected documents confirm a remote XSS impact, with PoC/advisories noting XSS alongside other issues (SQLi, URL ...
CVE-2014-9145
Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...
Multiple SQL Injection Vulnerabilities in Fiyo CMS
Fiyo CMS is small business phone service and mobile collaboration tool. Fiyo CMS has multiple SQL injection vulnerabilities. The vulnerabilities can be exploited by an attacker to gain access to sensitive database information...
Fiyo CMS Direct URL Access Vulnerability
Fiyo CMS is small business phone service and mobile collaboration tool. A direct URL access vulnerability exists in Fiyo CMS. An attacker could exploit the vulnerability to perform unauthorized actions...
Fiyo CMS Reflective Cross-Site Scripting Vulnerability
Fiyo CMS is small business phone service and mobile collaboration tool. A reflected cross-site scripting vulnerability exists in Fiyo CMS. An attacker can exploit the vulnerability to execute arbitrary script code in the context of an affected browser...
Fiyo CMS 'Name' POST Parameter Cross-Site Scripting Vulnerability
Fiyo CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...