Browse CVEs

CRITICAL 9.8 CVE-2020-17463 KEVEPSS 90% FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. Fuel Cms Mitigation only Fix from $2,3002020-08-13 HIGH 8.8 CVE-2019-15229 FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator i… Fuel Cms after 1.4.4 Fix from $1,9502019-08-20 MEDIUM 5.4 CVE-2019-15228 FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to cookie stealing and other malicious actions. This vulner… Fuel Cms after 1.4.4 Fix from $1,6002019-08-20 HIGH 8.8 CVE-2018-20188 FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account. Fuel Cms No fix yet Fix from $1,9502018-12-17 CRITICAL 9.8 CVE-2018-16762 FUEL CMS 1.4.1 allows SQL Injection via the layout, published, or search_term parameter to pages/items. Fuel Cms after 1.4.2 Fix from $2,3002018-09-09 CRITICAL 9.8 CVE-2018-16763EPSS 83% FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Cod… Fuel Cms after 1.4.2 Fix from $2,3002018-09-09 HIGH 8.8 CVE-2018-16416 Cross-site request forgery (CSRF) vulnerability in my_profile/edit?inline= in FUEL CMS 1.4 allows remote attackers to change the administrator's pass… Fuel Cms No fix yet Fix from $1,9502018-09-03