CVE-2020-26045

FUEL CMS 1.4.11 allows SQL Injection via parameter 'name' in /fuel/permissions/create/. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

PT-2021-11207

Name of the Vulnerable Software and Affected Versions: FUEL CMS version 1.4.11 Description: The issue allows SQL Injection via the name parameter in the "/fuel/permissions/create/" endpoint. This could enable an attacker to compromise the application, access or modify data, or exploit latent...

CVE-2020-26045: Improper Neutralization of Special Elements used in an SQL Command

FUEL CMS 1.4.11 allows SQL Injection via parameter 'name' in /fuel/permissions/create/. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...