CVE-2020-24950

2023-08-1100:00:00

mitre

www.cve.org

remote attackers

arbitrary code execution

base module model

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.3%

JSON

SQL Injection vulnerability in file Base_module_model.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attackers to execute arbitrary code via the col parameter to function list_items.

References

github.com/daylightstudio/FUEL-CMS/issues/562