CVE-2014-4032

CVE-2014-4032 affects Fiyo CMS 1.5.7; XSS via the Nama field in apps/app_comment/form_comment.php. The exploit could inject script/HTML; CVSSv2 base score 4.3 (MEDIUM). No remediation details are provided in the supplied documents.

CVE-2014-4032

Cross-site scripting XSS vulnerability in apps/appcomment/formcomment.php in Fiyo CMS 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the Nama field...

Fiyo CMS 1.5.7 Cross Site Scripting

Exploit Title: Fiyo CMS 1.5.7 XSS Vulnerability Date: 05/29/2014 Author: Mustafa ALTINKAYNAK Download URL :http://www.fiyo.org/ Software Link: http://www.fiyo.org/download Vuln Category: CWE-79 XSS Tested on: Fiyo CMS 1.5.7 Tested Local Platform : XAMP on Windows Patch/ Fix: Not published...