420 matches found
CVE-2021-38725
Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...
CVE-2021-38727
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items...
CVE-2021-38727
FUEL CMS 1.5.0 is vulnerable to SQL Injection via the col parameter in /fuel/index.php/fuel/logs/items. The root cause is lack of validation of the col parameter, allowing externally-inputted SQL statements. Consequences described across sources indicate potential arbitrary SQL execution and data...
CVE-2021-38721
FUEL CMS 1.5.0 login.php contains a cross-site request forgery CSRF vulnerability...
CVE-2021-38721
Affected software: FUEL CMS 1.5.0. Vulnerable component: login.php. Root cause: cross-site request forgery (CSRF) vulnerability in the login flow. Impact: allows CSRF on login-related actions as described; no further exploitation details or affected vectors are explicitly provided in the document...
CVE-2021-38721
FUEL CMS 1.5.0 login.php contains a cross-site request forgery CSRF vulnerability...
CVE-2021-38723
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...
CVE-2021-38723
CVE-2021-38723 affects FUEL CMS 1.5.0 with a SQL injection vulnerability exposed through the col parameter in /fuel/index.php/fuel/pages/items. The connected sources confirm the affected software and the injection vector, but do not provide exploit details, in-the-wild usage, or a confirmed remed...
CVE-2021-38725
Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...
CVE-2021-38725
Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...
CVE-2021-38725
CVE-2021-38725 — Fuel CMS 1.5.0 brute-force vulnerability . Affected software is Fuel CMS 1.5.0, with the issue located in the login controller file: fuel/modules/fuel/controllers/Login.php. The connected sources explicitly describe a brute-force vulnerability, and CNVD notes that an attacker can...
CVE-2021-38723: Improper Neutralization of Special Elements used in an SQL Command
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...
PT-2021-22276
Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.5.0 Description The issue allows SQL Injection via the parameter col in the "/fuel/index.php/fuel/pages/items" API endpoint. This enables an attacker to inject malicious SQL code, potentially leading to unauthorized data...
FUEL CMS SQL注入漏洞
FUEL CMS is a content management system based on CodeIgniter. A SQL injection vulnerability exists in Fuel CMS version 1.5.0. The vulnerability can be exploited to conduct SQL injection attacks via the col parameter in /fuel/index.php/fuel/pages/items...
PT-2021-22277
Name of the Vulnerable Software and Affected Versions Fuel CMS version 1.5.0 Description The issue is related to a brute force vulnerability. It is located in the fuel/modules/fuel/controllers/Login.php file. Recommendations For Fuel CMS version 1.5.0, consider temporarily disabling the login...
PT-2021-22278
Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.5.0 Description The issue allows SQL Injection via the parameter col in the "/fuel/index.php/fuel/logs/items" API endpoint. Recommendations For FUEL CMS version 1.5.0, avoid using the parameter col in the...
CVE-2021-38721: Cross-Site Request Forgery (CSRF)
FUEL CMS 1.5.0 login.php contains a cross-site request forgery CSRF vulnerability...
PT-2021-22275
Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.5.0 Description The issue is related to a cross-site request forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on the web application. Recommendations For FU...
CVE-2021-38727: Improper Neutralization of Special Elements used in an SQL Command
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items...