Automated Tank Gauge (ATG) Remote Configuration Disclosure Exploit

In 2015, HD Moore, the creator of Metasploit, published an article disclosing over 5,800 gas station Automated Tank Gauges ATGs which were publicly accessible. Besides monitoring for leakage, these systems are also instrumental in gauging fluid levels, tank temperature, and can alert operators wh...

The vulnerability of the FUEL CMS content management system lies in the lack of protection for SQL query structures, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the FUEL CMS content management system lies in the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through the col parameter in...

FUEL CMS Cross-Site Request Forgery Vulnerability (CNVD-2022-59047)

FUEL CMS is a content management system CMS based on the Codelgniter framework. A cross-site request forgery vulnerability exists in FUEL CMS version 1.5.0, which can be exploited by an attacker to forge a malicious request and trick a victim into clicking on it to perform a sensitive operation...

CVE-2021-44117

A Cross Site Request Forgery CSRF vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/sitevariables/delete/4...

CVE-2021-44117

A Cross Site Request Forgery CSRF vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/sitevariables/delete/4...

CVE-2021-44117

A Cross Site Request Forgery CSRF vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/sitevariables/delete/4...

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/sitevariables/delete/4...

CVE-2021-44117

A Cross Site Request Forgery CSRF vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/sitevariables/delete/4...

CVE-2021-44117

CVE-2021-44117 affects TheDayLightStudio Fuel CMS 1.5.0. The vulnerability is a Cross-Site Request Forgery (CSRF) present in a POST request to /fuel/sitevariables/delete/4, enabling an attacker to forge a request that performs a sensitive operation on behalf of a victim. NVD CVSSv3.1 vector: CVSS...

FUEL CMS 跨站请求伪造漏洞

FUEL CMS is a content management system CMS based on the Codelgniter framework. A cross-site request forgery vulnerability exists in FUEL CMS version 1.5.0, which can be exploited by an attacker to forge a malicious request and trick a victim into clicking on it to perform a sensitive operation...

VulnCheck KEV: CVE-2018-16763

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution...

FUEL CMS Cross-Site Scripting Vulnerability (CNVD-2022-38554)

FUEL CMS is a content management system CMS based on the Codelgniter framework.A cross-site scripting vulnerability exists in FUEL CMS version 1.5.1. The vulnerability stems from the program's lack of data validation filtering of user-supplied data and output. An attacker could exploit the...

CVE-2022-28599

A stored cross-site scripting XSS vulnerability exists in FUEL-CMS 1.5.1 that allows an authenticated user to upload a malicious .pdf file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger a XSS attack...

CVE-2022-28599

A stored cross-site scripting XSS vulnerability exists in FUEL-CMS 1.5.1 that allows an authenticated user to upload a malicious .pdf file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger a XSS attack...

Cross site scripting

A stored cross-site scripting XSS vulnerability exists in FUEL-CMS 1.5.1 that allows an authenticated user to upload a malicious .pdf file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger a XSS attack...

CVE-2022-28599

A stored cross-site scripting XSS vulnerability exists in FUEL-CMS 1.5.1 that allows an authenticated user to upload a malicious .pdf file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger a XSS attack...

CVE-2022-28599

CVE-2022-28599 affects FUEL-CMS 1.5.1. The vulnerability is a stored XSS where an authenticated user can upload a malicious .pdf file that acts as the payload; if an administrator triggers it, a stored XSS attack occurs. The provided documents do not specify a patch version or remediation steps. ...

CVE-2022-28599

A stored cross-site scripting XSS vulnerability exists in FUEL-CMS 1.5.1 that allows an authenticated user to upload a malicious .pdf file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger a XSS attack...

FUEL CMS跨站脚本漏洞

FUEL CMS is a content management system CMS based on the Codelgniter framework.A cross-site scripting vulnerability exists in FUEL CMS version 1.5.1. The vulnerability stems from the program's lack of data validation filtering of user-supplied data and output. An attacker could exploit the...

Fuel CMS 1.5.0 - Cross-Site Request Forgery (CSRF)

Exploit Title: Fuel CMS 1.5.0 - Cross-Site Request Forgery CSRF Google Dork: NA Date: 11/03/2022 Exploit Author: Ali J Vendor Homepage: https://www.getfuelcms.com/ Software Link: https://github.com/daylightstudio/FUEL-CMS/releases/tag/1.5.0 Version: 1.5.0 Tested on: Windows 10 Steps to Reproduce:...