Fiyo Fiyo CMS 2.0.7
Approved changes feed: RSS · Atom
cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*part: a version: 2.0.7 update: *
| Vendor | Fiyo (ea79b4af-f1a2-504a-8651-482332b865e7) |
|---|---|
| Product | Fiyo Cms (65e0400d-e549-5fb0-83b7-4134fce54376) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/fiyocms/fiyocms |
purl2cpe | 2026-06-01 10:17:43.773212 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-18545 |
vulnerable | 2026-06-08 05:11:14.223541 |
Details available
Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.
Published: 2018-10-21T01:00:00.000Z
Updated: 2024-08-05T11:15:59.908Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8853 |
vulnerable | 2026-06-08 05:10:09.002868 |
Details available
Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/app_config/controller/backuper.php via directory traversal in the file parameter during an act=db action.
Published: 2017-05-09T16:00:00.000Z
Updated: 2024-09-16T19:35:39.736Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7625 |
vulnerable | 2026-06-08 05:09:56.677083 |
Details available
In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and then execute code.
Published: 2017-04-10T17:00:00.000Z
Updated: 2024-08-05T16:12:27.159Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17104 |
vulnerable | 2026-06-08 05:09:07.916694 |
Details available
Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file.php via $_GET['src'] or $_GET['name'].
Published: 2017-12-04T08:00:00.000Z
Updated: 2024-08-05T20:43:59.896Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17103 |
vulnerable | 2026-06-08 05:09:07.916408 |
Details available
Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lead to escalation from normal user privileges to administrator privileges.
Published: 2017-12-04T08:00:00.000Z
Updated: 2024-08-05T20:43:59.590Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17102 |
vulnerable | 2026-06-08 05:09:07.916040 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-13778 |
vulnerable | 2026-06-08 05:08:48.859772 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11631 |
vulnerable | 2026-06-08 05:08:38.207471 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11630 |
vulnerable | 2026-06-08 05:08:38.207201 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11419 |
vulnerable | 2026-06-08 05:08:37.552910 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11418 |
vulnerable | 2026-06-08 05:08:37.552647 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11417 |
vulnerable | 2026-06-08 05:08:37.552386 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11416 |
vulnerable | 2026-06-08 05:08:37.552106 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11415 |
vulnerable | 2026-06-08 05:08:37.551826 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11414 |
vulnerable | 2026-06-08 05:08:37.551559 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11413 |
vulnerable | 2026-06-08 05:08:37.551292 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11412 |
vulnerable | 2026-06-08 05:08:37.551018 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11354 |
vulnerable | 2026-06-08 05:08:37.350019 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.