332 matches found
CVE-2022-28599
A stored cross-site scripting XSS vulnerability exists in FUEL-CMS 1.5.1 that allows an authenticated user to upload a malicious .pdf file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger a XSS attack...
CVE-2022-28599
CVE-2022-28599 affects FUEL-CMS 1.5.1. The vulnerability is a stored XSS where an authenticated user can upload a malicious .pdf file that acts as the payload; if an administrator triggers it, a stored XSS attack occurs. The provided documents do not specify a patch version or remediation steps. ...
CVE-2022-28599
A stored cross-site scripting XSS vulnerability exists in FUEL-CMS 1.5.1 that allows an authenticated user to upload a malicious .pdf file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger a XSS attack...
FUEL CMS跨站脚本漏洞
FUEL CMS is a content management system CMS based on the Codelgniter framework.A cross-site scripting vulnerability exists in FUEL CMS version 1.5.1. The vulnerability stems from the program's lack of data validation filtering of user-supplied data and output. An attacker could exploit the...
Fuel CMS 1.5.0 - Cross-Site Request Forgery (CSRF)
Exploit Title: Fuel CMS 1.5.0 - Cross-Site Request Forgery CSRF Google Dork: NA Date: 11/03/2022 Exploit Author: Ali J Vendor Homepage: https://www.getfuelcms.com/ Software Link: https://github.com/daylightstudio/FUEL-CMS/releases/tag/1.5.0 Version: 1.5.0 Tested on: Windows 10 Steps to Reproduce:...
Fuel CMS 1.5.0 - Cross-Site Request Forgery Vulnerability
Exploit Title: Fuel CMS 1.5.0 - Cross-Site Request Forgery CSRF Google Dork: NA Exploit Author: Ali J Vendor Homepage: https://www.getfuelcms.com/ Software Link: https://github.com/daylightstudio/FUEL-CMS/releases/tag/1.5.0 Version: 1.5.0 Tested on: Windows 10 Steps to Reproduce: 1. Login with us...
Fuel CMS 1.5.0 Cross Site Request Forgery
Exploit Title: Fuel CMS 1.5.0 - Cross-Site Request Forgery CSRF Google Dork: NA Date: 11/03/2022 Exploit Author: Ali J Vendor Homepage: https://www.getfuelcms.com/ Software Link: https://github.com/daylightstudio/FUEL-CMS/releases/tag/1.5.0 Version: 1.5.0 Tested on: Windows 10 Steps to Reproduce:...
CVE-2022-27156
Daylight Studio Fuel CMS 1.5.1 is vulnerable to HTML Injection...
Design/Logic Flaw
Daylight Studio Fuel CMS 1.5.1 is vulnerable to HTML Injection...
CVE-2022-27156
Daylight Studio Fuel CMS 1.5.1 is vulnerable to HTML Injection...
CVE-2022-27156
CVE-2022-27156 affects Daylight Studio Fuel CMS 1.5.1 and is described as vulnerable to HTML Injection. Public references in sources like NVD/Red Hat/CVE.org reiterate the affected product and vulnerability type; some connected entries (CNNVD) note the CMS is CodeIgniter-based. The initial data p...
CVE-2022-27156
Daylight Studio Fuel CMS 1.5.1 is vulnerable to HTML Injection...
Daylight Studio Fuel CMS跨站脚本漏洞
Daylight Studio Fuel CMS is a CodeIgniter-based content management system. A security vulnerability exists in Daylight Studio Fuel CMS 1.5.1 that allows HTML injection attacks...
FUEL CMS Cross-Site Scripting Vulnerability (CNVD-2022-71119)
FUEL CMS is a content management system CMS based on the Codelgniter framework. version 1.5.1 of FUEL CMS suffers from a cross-site scripting vulnerability, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to...
CVE-2021-44607
A Cross Site Scripting XSS vulnerability exists in FUEL-CMS 1.5.1 in the Assets page via an SVG file...
CVE-2021-44607
A Cross Site Scripting XSS vulnerability exists in FUEL-CMS 1.5.1 in the Assets page via an SVG file...
CVE-2021-44607
A Cross Site Scripting XSS vulnerability exists in FUEL-CMS 1.5.1 in the Assets page via an SVG file...
Cross site scripting
A Cross Site Scripting XSS vulnerability exists in FUEL-CMS 1.5.1 in the Assets page via an SVG file...
CVE-2021-44607
FUEL-CMS 1.5.1 is affected by a Cross-Site Scripting (XSS) vulnerability in the Assets page via an SVG file. The root cause, per CNVD-2022-71119, is lack of proper validation of client-side data by the web application. Affected product: FUEL-CMS (Codeligniter-based CMS). Concretely, the issue is ...