CVE-2018-16763-Fuel-CMS-1.4.1-Remote-Code-Execution-PoC

CVE-2018-16763 — Fuel CMS 1.4.1 Remote Code Execution PoC Nicht authentifizierte RCE-Sicherheitslücke in Fuel CMS 1.4.1. Der Parameter filter im Endpunkt /fuel/pages/select/ wird ohne Bereinigung an einen eval-Aufruf im PHP-Backend übergeben, wodurch beliebiger Code über einen manipulierten Paylo...

CVE-2018-16763

CVE-2018-16763 Analyzer CVE-2018-16763 Analyzer è un piccolo progetto Python per analizzare CVE-2018-16763 contro target FUEL CMS. Si concentra sul verificare se un target appare vulnerabile e sul mostrare l'output dei comandi in modo più pulito e leggibile quando la risposta dell'applicazione è...

Project-Exploiting-a-Vulnerability-in-Fuel-CMS-CVE-2018-16763-

Das Ziel dieses Projekts war die Durchführung eines Sicherheitsaudits eines kürzlich von Ackme Support Incorporated gestarteten Blogs, um kritische Schwachstellen zu identifizieren, bevor die Website öffentlich wird. Die Aufgabe bestand darin, einen Weg zu finden, um aus der Ferne Code auszuführe...

Fuel-CMS-Remote-Code-Execution-1.4--RCE--

Questo repository non contiene un README...

CVE-2018-16763

Fuel CMS 1.4.1 - Remote-Code-Ausführung FUEL CMS 1.4.1 ermöglicht die Auswertung von PHP-Code über den Filterparameter pages/select/ oder den Datenparameter preview/. Dies kann zu einer Pre-Auth-Remote-Code-Ausführung führen. Installation root@kitploit: git clone...

CVE_2018_16763_Proof_of_Concept

CVE-2018-16763 Proof-of-Concept Ein Proof-of-Concept PoC Exploit für CVE-2018-16763 Fuel CMS – Preauthenticated Remote Code Execution. Beschreibung Dieses Python-3-Programm dient als PoC für die Schwachstelle CVE-2018-16763 im Content-Management-System Fuel CMS. Konkret ermöglicht die Schwachstel...

CVE-2018-16763

CVE-2018-16763 Titolo dell'exploit: fuel CMS 1.4.1 - Esecuzione di codice remota Script Python3 - 💻 Questo script è stato sviluppato da h3x0v3rl0rd...

CVE-2018-16763

CVE 2018-16763 Exploit Introdução PreAuth-RCE no FUEL CMS 1.4.1 Demonstração Referência: https://nvd.nist.gov/vuln/detail/CVE-2018-16763 https://www.exploit-db.com/exploits/47138...

exploit_cms_fuel

Fuel CMS 1.4.1 - Exploit di Remote Code Execution RCE Questo repository contiene un'implementazione in Python 3 di un exploit per Fuel CMS versione 1.4.1. Lo script sfrutta CVE-2018-16763 , una vulnerabilità in cui una validazione insufficiente degli input nei parametri filter e preview consente ...

Fuel CMS 1.4.7 - SQL Injection

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. id: CVE-2020-17463 info: name: Fuel CMS 1.4.7 - SQL Injection author: Thirukrishnan severity: critical description: | FUEL CMS 1.4.7 allows SQL Injection via the col parameter to...

CVE-2018-16763

CVE-2018-16763 Fuel CMS 1.4.1 - Esecuzione di codice remoto - Python 3.x Script originale: Exploit-DB...

THM-Vulnerability_Capstone-CVE-2018-16763

THM-VulnerabilityCapstone-CVE-2018-16763 Ein Write-up über den THM-Raum Vulnerability Capstone & Exploit-Skript für CVE-2018-16763. DANKSAGUNGEN Ich beanspruche keine Anerkennung für die Entdeckung dieser Schwachstelle. Danke an die folgenden Personen. Entdeckung der Schwachstelle: 0xd0ff9...

fuel-cms-cve-2018-16763-python3-port

Porte de Compatibilidade com Python 3 do FUEL CMS 1.4.1 Visão Geral Este repositório contém um porte de compatibilidade com Python 3 da prova de conceito original para CVE-2018-16763 , que afeta o FUEL CMS 1.4.1. A prova de conceito original foi escrita por 0xd0ff9. Este repositório não reivindic...

CVE-2021-47980

Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'col' parameter in the Activity Log interface. Attackers can send requests to the logs endpoint with malicious SQL payloads in the 'col...

CVE-2021-47980 Fuel CMS 1.4.13 Blind SQL Injection via col Parameter

Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'col' parameter in the Activity Log interface. Attackers can send requests to the logs endpoint with malicious SQL payloads in the 'col...

CVE-2021-47980

Fuel CMS 1.4.13 is affected by a blind SQL injection via the col parameter in the Activity Log interface. Authenticated attackers can craft requests to the logs endpoint with malicious SQL payloads in col to influence database queries and infer data based on response-time delays. The provided doc...

CVE-2021-47980 Fuel CMS 1.4.13 Blind SQL Injection via col Parameter

Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'col' parameter in the Activity Log interface. Attackers can send requests to the logs endpoint with malicious SQL payloads in the 'col...

📄 Fuel CMS 1.4.1 PHP Code Injection

This Metasploit module targets a remote code execution vulnerability in Fuel CMS version 1.4.1. The issue stems from improper input sanitization in the filter parameter, which is passed into a dangerous PHP evaluation eval context, enabling code injection...

CVE-2026-38948

CVE-2026-38948 affects FUEL CMS

CVE-2026-38948

Cross-Site Scripting XSS vulnerability exists in FUEL CMS v1.5.2 and before within the asset upload functionality. The application fails to properly sanitize uploaded SVG files, allowing a low-privileged authenticated user to upload a crafted SVG file containing malicious code...