CVE-2014-9148

Mô tả

Tham khảo

• packetstormsecurity.com/files/131165/FiyoCMS-2.0.1.8-XSS-SQL-Injection-URL-Bypass.html · Exploit
• securityfocus.com/bid/73437 · Third Party Advisory
• exploit-db.com/exploits/36581 · Exploit

Lỗ hổng khác của fiyo cms

• CVE-2020-35373TRUNG BÌNH 6.1In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.
• CVE-2018-18545TRUNG BÌNH 6.1Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.
• CVE-2017-17104CAO 7.5Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file.php via $_GET['src'] or $_GET['name'].
• CVE-2017-17103CAO 8.8Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lead to escalation…
• CVE-2017-17102CAO 7.5Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $_REQUEST['link'].