All packages
FUEL CMS vulnerabilities
3 known CVE vulnerabilities in FUEL CMS, translated and rated.
- CVE-2021-47980High
Fuel CMS version 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'col' parameter in the Activity Log interface.
- CVE-2020-17463CriticalActively exploited
FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. An attacker can manipulate database queries.
- CVE-2023-33557High
Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at /controllers/Blocks.php.