Lucene search
+L

332 matches found

Vulnrichment
Vulnrichment
added 2026/04/28 12:00 a.m.7 views

CVE-2026-38948

Cross-Site Scripting XSS vulnerability exists in FUEL CMS v1.5.2 and before within the asset upload functionality. The application fails to properly sanitize uploaded SVG files, allowing a low-privileged authenticated user to upload a crafted SVG file containing malicious code...

5.2AI score0.00165EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/28 12:00 a.m.9 views

EUVD-2026-26063

Cross-Site Scripting XSS vulnerability exists in FUEL CMS v1.5.2 and before within the asset upload functionality. The application fails to properly sanitize uploaded SVG files, allowing a low-privileged authenticated user to upload a crafted SVG file containing malicious code...

5.4CVSS5.2AI score0.00165EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/28 12:00 a.m.22 views

PT-2026-35746

Cross-Site Scripting XSS vulnerability exists in FUEL CMS v1.5.2 and before within the asset upload functionality. The application fails to properly sanitize uploaded SVG files, allowing a low-privileged authenticated user to upload a crafted SVG file containing malicious code...

5.4CVSS5.2AI score0.00165EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/28 12:00 a.m.18 views

FUEL CMS 跨站脚本漏洞

FUEL CMS is a content management system CMS developed by David McReynolds using the Codelgniter framework. Versions of FUEL CMS prior to 1.5.2 had a cross-site scripting vulnerability. This vulnerability stemmed from the asset upload feature not properly cleaning up uploaded SVG files, allowing...

5.4CVSS5.6AI score0.00165EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/27 5:16 p.m.10 views

CVE-2026-30462

A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal...

4.3CVSS0.00468EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/27 12:00 a.m.18 views

FUEL CMS 路径遍历漏洞

FUEL CMS is a content management system CMS developed by David McReynolds using the Codelgniter framework. Version 1.5.2 of FUEL CMS contains a path traversal vulnerability, which stems from path traversal in the Blocks module and could lead to directory traversal attacks...

4.3CVSS5.8AI score0.00468EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/16 12:00 a.m.16 views

FUEL CMS 安全漏洞

FUEL CMS is a content management system CMS developed by David McReynolds using the Codelgniter framework. Version 1.5.2 of FUEL CMS has a security vulnerability, which stems from a problem with the forgot password feature. This issue may allow unverified attackers to obtain the password reset...

7.1CVSS5.8AI score0.00263EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/04/15 12:00 a.m.13 views

FUEL CMS 安全漏洞

FUEL CMS is a content management system CMS developed by David McReynolds using the Codelgniter framework. Version 1.5.2 of FUEL CMS has a security vulnerability that stems from authenticated remote code execution. This vulnerability could allow arbitrary code to be executed through the...

8.3CVSS6.3AI score0.00526EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/04/07 6:31 p.m.8 views

EUVD-2026-19644

Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution RCE vulnerability in the Blocks module...

6.5AI score0.00794EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/04/07 12:00 a.m.14 views

FUEL CMS 安全漏洞

FUEL CMS is a content management system CMS developed by David McReynolds using the Codelgniter framework. Version 1.2 of FUEL CMS has a security vulnerability, which stems from an issue in the Blocks module where authenticated remote code execution is possible...

8.8CVSS6.4AI score0.00794EPSS
SaveExploits1References4
Packet Storm
Packet Storm
added 2026/04/06 12:00 a.m.159 views

📄 Fuel CMS 1.4.1 Remote Command Execution

Fuel CMS version 1.4.1 unauthenticated remote command execution exploit that leverages an issue discovered back in 2018. !/usr/bin/python3 Exploit Title: Fuel CMS 1.4.1 - Remote Code Execution RCE via filter parameter Google Dork: intitle:"Welcome to Fuel CMS" inurl:/fuel/ Date: 2025-04-05 Exploi...

9.8CVSS7.4AI score0.82937EPSS
SaveExploits19
CNNVD
CNNVD
added 2026/03/26 12:00 a.m.24 views

FUEL CMS 安全漏洞

FUEL CMS is a content management system CMS developed by David McReynolds using the Codelgniter framework. Version 1.5.2 of FUEL CMS contains a security vulnerability, which stems from issues with the /parser/dwoo component. Attackers can execute arbitrary code through specially crafted PHP code...

9.8CVSS6.2AI score0.00631EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/03/26 12:00 a.m.16 views

FUEL CMS 安全漏洞

FUEL CMS is a content management system CMS developed by David McReynolds using the Codelgniter framework. Version 1.5.2 of FUEL CMS contains a security vulnerability, which stems from the /controllers/Login.php component being vulnerable to SQL injection attacks...

7.7CVSS5.8AI score0.00309EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-14917

Malware in sbrugna...

5.4CVSS5.6AI score0.00576EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-23168

Malware in sbrugna...

8.8CVSS8.5AI score0.00428EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-18676

Malware in sbrugna...

5.4CVSS5.5AI score0.00653EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-21103

Malware in sbrugna...

4.3CVSS4.8AI score0.00585EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-24748

Malware in sbrugna...

8.1CVSS8AI score0.01294EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-12705

Malware in sbrugna...

4.8CVSS5.1AI score0.00559EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2018-12755

Malware in sbrugna...

8.8CVSS8.8AI score0.00523EPSS
SaveExploits1References2
Rows per page
Query Builder