CVE-2018-20188

FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account...

CVE-2018-20188

FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account...

Cross site request forgery (csrf)

FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account...

CVE-2018-20188

FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account...

CVE-2018-20188

CVE-2018-20188 affects FUEL CMS 1.4.3, where a cross-site request forgery (CSRF) via the /users/create/ endpoint can be abused to add an administrator account. The connected Red Hat/ENISA/CNVD/NVD sources corroborate the same description, indicating the vulnerability status and impact as describe...

CVE-2018-20188: Cross-Site Request Forgery (CSRF)

FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account...

PT-2018-15288

Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.4.3 Description The issue allows for CSRF via the "users/create/" endpoint to add an administrator account. Recommendations For FUEL CMS version 1.4.3, consider implementing proper CSRF protection mechanisms to prevent...

FUEL CMS Cross-Site Scripting Vulnerability (CNVD-2019-07076)

FUEL CMS is a content management system based on CodeIgniter. A cross-site scripting vulnerability exists in FUEL CMS 1.4.3, which can be exploited by an attacker to conduct a cross-site scripting attack via a title or body text in a layout variable during new page creation...

CVE-2018-20136

XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page creation, as demonstrated by the pages/edit/1?lang=english URI...

CVE-2018-20136

XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page creation, as demonstrated by the pages/edit/1?lang=english URI...

CVE-2018-20137

XSS exists in FUEL CMS 1.4.3 via the Page title, Meta description, or Meta keywords during page data management, as demonstrated by the pages/edit/1?lang=english URI...

Cross site scripting

XSS exists in FUEL CMS 1.4.3 via the Page title, Meta description, or Meta keywords during page data management, as demonstrated by the pages/edit/1?lang=english URI...

CVE-2018-20137

XSS exists in FUEL CMS 1.4.3 via the Page title, Meta description, or Meta keywords during page data management, as demonstrated by the pages/edit/1?lang=english URI...

Cross site scripting

XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page creation, as demonstrated by the pages/edit/1?lang=english URI...

CVE-2018-20136

XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page creation, as demonstrated by the pages/edit/1?lang=english URI...

CVE-2018-20137

XSS exists in FUEL CMS 1.4.3 via the Page title, Meta description, or Meta keywords during page data management, as demonstrated by the pages/edit/1?lang=english URI...

CVE-2018-20137

CVE-2018-20137 affects FUEL CMS 1.4.3. The vulnerability is a cross-site scripting flaw exposed in page data management, specifically via the Page title, Meta description, or Meta keywords in the pages/edit/1?lang=english URI. The connected documents confirm the issue but do not provide a fix or ...

CVE-2018-20136

CVE-2018-20136 affects FUEL CMS 1.4.3, where an XSS flaw exists in the Header or Body within Layout Variables during new-page creation (demonstrated via pages/edit/1?lang=english). The root cause is input reflected in layout variables, enabling script injection. Impact is cross-site scripting; ex...

CVE-2018-20137: Improper Neutralization of Input During Web Page Generation

XSS exists in FUEL CMS 1.4.3 via the Page title, Meta description, or Meta keywords during page data management, as demonstrated by the pages/edit/1?lang=english URI...

PT-2018-15265

Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.4.3 Description A security issue exists in the software, where XSS can be triggered via the Page title, Meta description, or Meta keywords during page data management. This is demonstrated by the "/pages/edit/1?lang=english"...