6 matches found
Sql injection
SQL Injection vulnerability in file Basemodulemodel.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attackers to execute arbitrary code via the col parameter to function listitems...
6.5CVSS9.2AI score0.01137EPSS
SaveExploits1References1Affected Software1
CVE-2020-24950
SQL Injection vulnerability in file Basemodulemodel.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attackers to execute arbitrary code via the col parameter to function listitems...
8.8AI score0.01137EPSS
SaveExploits1References1
Cross site scripting
Cross Site Scripting vulnerability in daylight studio FUEL- CMS v.1.4.6 allows a remote attacker to execute arbitrary code via the page title, meta description and meta keywords of the pages function...
4.9CVSS5.8AI score0.00576EPSS
SaveExploits1References1Affected Software1
CVE-2022-27156
Daylight Studio Fuel CMS 1.5.1 is vulnerable to HTML Injection...
5.4CVSS0.00485EPSS
SaveExploits1References1
20