Lucene search
+L

88 matches found

OSV
OSV
•added 2021/09/09 3:15 p.m.•22 views

CVE-2021-38723

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...

8.8CVSS8.1AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2021/09/09 3:15 p.m.•10 views

CVE-2021-38723

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...

8.8CVSS7.3AI score0.01002EPSS
SaveExploits1References2
CVE
CVE
•added 2021/09/09 3:14 p.m.•72 views

CVE-2021-38727

FUEL CMS 1.5.0 is vulnerable to SQL Injection via the col parameter in /fuel/index.php/fuel/logs/items. The root cause is lack of validation of the col parameter, allowing externally-inputted SQL statements. Consequences described across sources indicate potential arbitrary SQL execution and data...

9.8CVSS9.9AI score0.01608EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/09/09 3:14 p.m.•35 views

CVE-2021-38727

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items...

10AI score0.01608EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/09 12:00 a.m.•2 views

CVE-2021-38727: Improper Neutralization of Special Elements used in an SQL Command

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items...

9.8CVSS5.8AI score0.01608EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/09 12:00 a.m.•3 views

CVE-2021-38723: Improper Neutralization of Special Elements used in an SQL Command

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...

8.8CVSS5.8AI score0.01002EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/09/09 12:00 a.m.•14 views

FUEL CMS SQL注入漏洞

FUEL CMS is a content management system based on CodeIgniter. A SQL injection vulnerability exists in Fuel CMS version 1.5.0. The vulnerability can be exploited to conduct SQL injection attacks via the col parameter in /fuel/index.php/fuel/pages/items...

8.8CVSS5.9AI score0.01002EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/04/08 1:15 p.m.•8 views

CVE-2021-28925

SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the ocol parameter to api/checks/read/...

9.8CVSS5.7AI score0.04817EPSS
SaveExploits1References3
Prion
Prion
•added 2021/04/08 1:15 p.m.•24 views

Sql injection

SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the ocol parameter to api/checks/read/...

7.5CVSS9.7AI score0.04817EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/08 12:00 a.m.•4 views

CVE-2021-28925: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the ocol parameter to api/checks/read/...

9.8CVSS5.9AI score0.04817EPSS
SaveExploits1References2
VulnCheck KEV
VulnCheck KEV
•added 2020/12/14 12:00 a.m.•11 views

VulnCheck KEV: CVE-2020-17463

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items...

9.8CVSS7.6AI score0.89689EPSS
SaveIn wildExploits4References3
NVD
NVD
•added 2020/08/13 1:15 p.m.•16 views

CVE-2020-17463

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items...

9.8CVSS9.9AI score0.89689EPSS
SaveExploits4References6
OSV
OSV
•added 2020/08/13 1:15 p.m.•30 views

CVE-2020-17463

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items...

9.8CVSS8AI score
SaveExploits0References6
Prion
Prion
•added 2020/08/13 1:15 p.m.•31 views

Sql injection

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items...

7.5CVSS9.8AI score0.89689EPSS
SaveExploits4References5Affected Software1
CVE
CVE
•added 2020/08/13 12:28 p.m.•1132 views

CVE-2020-17463

Summary: CVE-2020-17463 affects Fuel CMS 1.4.7 and enables SQL Injection via the col parameter in /pages/items, /permissions/items, or /navigation/items. The underlying issue is a CWE-89-style vulnerable input handling that allows untrusted input to affect SQL queries. Impact in sources: high, in...

9.8CVSS9.7AI score0.89689EPSS
SaveIn wildExploits4References6Affected Software1
Cvelist
Cvelist
•added 2020/08/13 12:28 p.m.•68 views

CVE-2020-17463

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items...

9.9AI score0.89689EPSS
SaveExploits4References5
attackerkb
attackerkb
•added 2020/08/13 12:00 a.m.•47 views

CVE-2020-17463

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

9.8CVSS4AI score0.89689EPSS
SaveIn wildExploits4References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/13 12:00 a.m.•1 views

CVE-2020-17463: Improper Neutralization of Special Elements used in an SQL Command

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items...

9.8CVSS8.2AI score0.89689EPSS
SaveExploits4References2
Openbugbounty
Openbugbounty
•added 2020/07/23 7:47 a.m.•7 views

col-dornon.com Cross Site Scripting vulnerability OBB-1235543

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2018/10/09 11:44 p.m.•10 views

col-dornon.com XSS vulnerability

Open Bug Bounty ID: OBB-684425 Description| Value ---|--- Affected Website:| col-dornon.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

0.1AI score
SaveExploits0
Rows per page
Query Builder