Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 2 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 6.1 CVE-2020-35373 In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack. Fiyo Cms No fix yet Fix from $1,6002021-06-17 MEDIUM 6.1 CVE-2018-18545 Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter. Fiyo Cms No fix yet Fix from $1,6002018-10-21 CRITICAL 9.8 CVE-2015-3934 Multiple SQL injection vulnerabilities in Fiyo CMS 2.0_1.9.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to app… Fiyo Cms No fix yet Fix from $2,3002017-11-21 CRITICAL 9.8 CVE-2017-7625 In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and then execu… Fiyo Cms No fix yet Fix from $2,3002017-04-10 HIGH 8.8 CVE-2017-6823EPSS 8% Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit action. Fiyo Cms No fix yet Fix from $1,9502017-03-12 HIGH 7.5 CVE-2014-9145 Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an ed… Fiyo Cms No fix yet Fix from $1,9502015-04-14