CVE-2019-15229

FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page...

PT-2019-14026

Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.4.4 Description The issue allows an attacker to trick the administrator into executing arbitrary code via a specially crafted HTML page, due to CSRF in the blocks/create/ Create Blocks section of the Admin console...

CVE-2019-15229: Cross-Site Request Forgery (CSRF)

FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page...