CVE-2021-38727

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items...

PT-2021-22278

Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.5.0 Description The issue allows SQL Injection via the parameter col in the "/fuel/index.php/fuel/logs/items" API endpoint. Recommendations For FUEL CMS version 1.5.0, avoid using the parameter col in the...