CVE Catalog
CVE-2023-33557
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk0.80%
52th percentile - higher than 52% of all known CVEs
Summary
Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at /controllers/Blocks.php.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.
Recommendation
It is recommended to update Fuel CMS to the latest version to mitigate this vulnerability and review the code to secure input parameters.
Other vulnerabilities in Fuel CMS v1.5.2
Original NVD description (English source)
Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at /controllers/Blocks.php.