420 matches found
CVE-2019-15229
FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page...
CVE-2019-15229
FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page...
CVE-2019-15229
FUEL CMS 1.4.4 is affected by a CSRF flaw in the Admin console’s blocks/create/Create Blocks section. The vulnerability allows an attacker to trick an administrator into executing arbitrary code by requesting a crafted HTML page. Root cause: CSRF in the blocks/create path. Impact is described as ...
CVE-2019-15228
FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account but can also impact unauthenticated visitors...
CVE-2019-15228
CVE-2019-15228 affects FUEL CMS 1.4.4. The XSS is in the Create Blocks section of the Admin console, arising from insufficient input validation in the admin UI. Impact could include cookie theft and other malicious actions, with exploitation possible by authenticated users and also affecting unau...
CVE-2019-15228
FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account but can also impact unauthenticated visitors...
FUEL CMS Cross-Site Scripting Vulnerability (CNVD-2019-41832)
FUEL CMS is a content management system CMS based on the Codelgniter framework. A cross-site scripting vulnerability exists in the Create Blocks section of the Admin console in FUEL CMS version 1.4.4, which stems from a lack of proper validation of client-side data in the WEB application and can ...
PT-2019-14025
Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.4.4 Description The issue concerns a cross-site scripting XSS flaw in the Create Blocks section of the Admin console. This could potentially lead to cookie stealing and other malicious actions. It can be exploited with an...
PT-2019-14026
Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.4.4 Description The issue allows an attacker to trick the administrator into executing arbitrary code via a specially crafted HTML page, due to CSRF in the blocks/create/ Create Blocks section of the Admin console...
CVE-2019-15229: Cross-Site Request Forgery (CSRF)
FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page...
CVE-2019-15228: Improper Neutralization of Input During Web Page Generation
FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account but can also impact unauthenticated visitors...
fuel CMS 1.4.1 - Remote Code Execution (1)
Exploit Title: fuel CMS 1.4.1 - Remote Code Execution 1 Date: 2019-07-19 Exploit Author: 0xd0ff9 Vendor Homepage: https://www.getfuelcms.com/ Software Link: https://github.com/daylightstudio/FUEL-CMS/releases/tag/1.4.1 Version: = 0 and n 1: start = haystack.findneedle, start+1 n -= 1 return start...
FUEL CMS Cross-Site Request Forgery Vulnerability (CNVD-2019-07072)
FUEL CMS is a content management system based on CodeIgniter. FUEL CMS 1.4.3 suffers from a cross-site request forgery vulnerability that can be exploited to add an administrator account via users/create/...
CVE-2018-20188
FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account...
CVE-2018-20188
FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account...
Cross site request forgery (csrf)
FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account...
CVE-2018-20188
FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account...
CVE-2018-20188
CVE-2018-20188 affects FUEL CMS 1.4.3, where a cross-site request forgery (CSRF) via the /users/create/ endpoint can be abused to add an administrator account. The connected Red Hat/ENISA/CNVD/NVD sources corroborate the same description, indicating the vulnerability status and impact as describe...
PT-2018-15288
Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.4.3 Description The issue allows for CSRF via the "users/create/" endpoint to add an administrator account. Recommendations For FUEL CMS version 1.4.3, consider implementing proper CSRF protection mechanisms to prevent...