Known Vulnerabilities for products from Fiyo
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Fiyo".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-35373 json | In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack. | 6.1 - MEDIUM | 2021-06-17 | 2021-06-22 |
| CVE-2018-18545 json | Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter. | 6.1 - MEDIUM | 2018-10-21 | 2020-06-02 |
| CVE-2017-17104 json | Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file.php via $_GET['src'] or $_GET... | Not Provided | 2017-12-04 | 2025-04-20 |
| CVE-2017-17103 json | Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lea... | Not Provided | 2017-12-04 | 2025-04-20 |
| CVE-2017-17102 json | Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $_REQUEST['link']. | Not Provided | 2017-12-04 | 2025-04-20 |
| CVE-2017-13778 json | Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter. | 6.1 - MEDIUM | 2017-08-30 | 2017-08-31 |
| CVE-2017-11631 json | dapur/app/app_user/controller/status.php in Fiyo CMS 2.0.7 has SQL injection via the id parameter. | Not Provided | 2017-07-26 | 2025-04-20 |
| CVE-2017-11630 json | dapur\apps\app_config\controller\backuper.php in Fiyo CMS 2.0.7 allows remote attackers to delete arbitrary files via directo... | Not Provided | 2017-07-26 | 2025-04-20 |
| CVE-2017-11419 json | Fiyo CMS 2.0.7 has SQL injection in /apps/app_article/controller/editor.php via $_POST['id'] and $_POST['art_title']. | Not Provided | 2017-07-18 | 2025-04-20 |
| CVE-2017-11418 json | Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_list.php via $_GET['cat'], $_GET['user'], $_GET... | Not Provided | 2017-07-18 | 2025-04-20 |
| CVE-2017-11417 json | Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_status.php via $_GET['id']. | Not Provided | 2017-07-18 | 2025-04-20 |
| CVE-2017-11416 json | Fiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter. | Not Provided | 2017-07-18 | 2025-04-20 |
| CVE-2017-11415 json | Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/sys_article.php via $_POST['parent_id'], $_POST['desc'], $_POST['k... | Not Provided | 2017-07-18 | 2025-04-20 |
| CVE-2017-11414 json | Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/sys_comment.php via $_POST['comment'], $_POST['name'], $_POST['web... | Not Provided | 2017-07-18 | 2025-04-20 |
| CVE-2017-11413 json | Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/comment_status.php via $_GET['id']. | Not Provided | 2017-07-18 | 2025-04-20 |
| CVE-2017-11412 json | Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/controller/comment_status.php via $_GET['id']. | Not Provided | 2017-07-18 | 2025-04-20 |
| CVE-2017-11354 json | Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/app_article/sys_article.php via the name parameter in editin... | Not Provided | 2017-07-17 | 2025-04-20 |
| CVE-2017-8853 json | Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/app_config/controller/backuper.php via directory tra... | Not Provided | 2017-05-09 | 2025-04-20 |
| CVE-2017-7625 json | In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_... | Not Provided | 2017-04-10 | 2025-04-20 |
| CVE-2017-6823 json | Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user... | Not Provided | 2017-03-12 | 2025-04-20 |
Known software with vulnerabilities from Fiyo
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Fiyo | Fiyo Cms | 1.5.7 |