319 matches found
The vulnerability of the FUEL CMS content management system, which arises due to the failure to take measures to neutralize special elements, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the functions in the fuel/modules/fuel/config/fuelconstants.php and fuel/modules/fuel/libraries/Asset.php files of the FUEL CMS content management system exists due to the lack of measures taken to neutralize these special elements. Exploiting this vulnerability can allow a...
FUEL CMS SQL Injection Vulnerability (CNVD-2021-93894)
FUEL CMS is a content management system based on CodeIgniter. A SQL injection vulnerability exists in Fuel CMS version 1.5.0. The vulnerability can be exploited to conduct SQL injection attacks via the col parameter in /fuel/index.php/fuel/pages/items...
CVE-2021-38727
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items...
Sql injection
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items...
CVE-2021-38723
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...
CVE-2021-38723
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...
CVE-2021-38725
Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...
CVE-2021-38721
FUEL CMS 1.5.0 login.php contains a cross-site request forgery CSRF vulnerability...
CVE-2021-38725
Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...
CVE-2021-38725
Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...
Cross site request forgery (csrf)
FUEL CMS 1.5.0 login.php contains a cross-site request forgery CSRF vulnerability...
CVE-2021-38723
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...
Sql injection
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...
CVE-2021-38721
FUEL CMS 1.5.0 login.php contains a cross-site request forgery CSRF vulnerability...
Design/Logic Flaw
Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...
CVE-2021-38727
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items...
CVE-2021-38727
FUEL CMS 1.5.0 is vulnerable to SQL Injection via the col parameter in /fuel/index.php/fuel/logs/items. The root cause is lack of validation of the col parameter, allowing externally-inputted SQL statements. Consequences described across sources indicate potential arbitrary SQL execution and data...
CVE-2021-38721
Affected software: FUEL CMS 1.5.0. Vulnerable component: login.php. Root cause: cross-site request forgery (CSRF) vulnerability in the login flow. Impact: allows CSRF on login-related actions as described; no further exploitation details or affected vectors are explicitly provided in the document...