CVE-2014-9148

Critical

Published: 16/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Fiyo CMS version 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the super administrator functions 'Install and Update' or 'Backup' via the view parameter in a direct request to fiyo/dapur.

Risk Assessment

Attackers may gain unauthorized access to critical system functions, potentially leading to serious data security breaches.

Recommendation

It is recommended to update Fiyo CMS to the latest version and implement additional security measures to restrict access to critical functions.

Original NVD description (English source)

Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update" or (2) Backup super administrator function via the view parameter in a direct request to fiyo/dapur.