Lucene search
+L

248 matches found

CNVD
CNVD
•added 2015/04/01 12:00 a.m.•21 views

Multiple SQL Injection Vulnerabilities in Fiyo CMS

Fiyo CMS is small business phone service and mobile collaboration tool. Fiyo CMS has multiple SQL injection vulnerabilities. The vulnerabilities can be exploited by an attacker to gain access to sensitive database information...

7.5CVSS8.5AI score0.0207EPSS
SaveExploits5References1
OpenVAS
OpenVAS
•added 2014/06/23 12:00 a.m.•27 views

Fiyo CMS 'Name' POST Parameter Cross-Site Scripting Vulnerability

Fiyo CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.8AI score0.01854EPSS
SaveExploits1References3
NVD
NVD
•added 2014/06/11 2:55 p.m.•29 views

CVE-2014-4032

Cross-site scripting XSS vulnerability in apps/appcomment/formcomment.php in Fiyo CMS 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the Nama field...

4.3CVSS5.7AI score0.01854EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2014/06/11 2:00 p.m.•35 views

CVE-2014-4032

Cross-site scripting XSS vulnerability in apps/appcomment/formcomment.php in Fiyo CMS 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the Nama field...

5.7AI score0.01854EPSS
SaveExploits1References3
CVE
CVE
•added 2014/06/11 2:00 p.m.•61 views

CVE-2014-4032

CVE-2014-4032 affects Fiyo CMS 1.5.7; XSS via the Nama field in apps/app_comment/form_comment.php. The exploit could inject script/HTML; CVSSv2 base score 4.3 (MEDIUM). No remediation details are provided in the supplied documents.

4.3CVSS5.8AI score0.01854EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2014/06/11 12:00 a.m.•4 views

PT-2014-5684

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 1.5.7 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Nama field. This could potentially lead to unauthorized actions on the web application. Recommendations...

4.3CVSS0.01854EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/06/11 12:00 a.m.•7 views

CVE-2014-4032: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in apps/appcomment/formcomment.php in Fiyo CMS 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the Nama field...

4.3CVSS6AI score0.01854EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2014/05/30 12:00 a.m.•42 views

Fiyo CMS 1.5.7 Cross Site Scripting

Exploit Title: Fiyo CMS 1.5.7 XSS Vulnerability Date: 05/29/2014 Author: Mustafa ALTINKAYNAK Download URL :http://www.fiyo.org/ Software Link: http://www.fiyo.org/download Vuln Category: CWE-79 XSS Tested on: Fiyo CMS 1.5.7 Tested Local Platform : XAMP on Windows Patch/ Fix: Not published...

7.4AI score
SaveExploits0
Rows per page
Query Builder