CVE-2018-16763-exploit

CVE-2018-16763-exploit Esta es una versión actualizada del CVE-2018-16763 para fuelCMS 1.4.1 El script se basa en el de https://www.exploit-db.com/exploits/47138 El script está actualizado para su uso con Python 3...

CVE-2018-16763-FuelCMS-1.4.1-RCE

CVE-2018-16763-FuelCMS-1.4.1-RCE La versión original de este exploit está aquí: https://www.exploit-db.com/exploits/50477 Lo modifiqué para que funcione en Vulnerability Capstone de TryHackMe...

CVE-2018-16763_FuelCMS-1.4.1_RCE

CVE-2018-16763 FuelCMS - 1.4.1 - RCE PoC FuelCMS 1.4.1 permite la evaluación de código PHP a través del parámetro filter de pages/select/ o del parámetro data de preview/. Esto puede conducir a una ejecución remota de código sin autenticación previa. Exploit Esto funciona explotando el parámetro...

FUEL CMS 1.4.1 - Remote Code Execution

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. id: CVE-2018-16763 info: name: FUEL CMS 1.4.1 - Remote Code Execution author: pikpikcu severity: critical description: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/...

CVE-2018-16763-FuelCMS-1.4.1-RCE

CVE-2018-16763 - RCE en FuelCMS = 1.4.1 Exploit para desencadenar RCE para CVE-2018-16763 en FuelCMS = 1.4.1 y shell interactiva. Características Automáticamente sube una webshell PHP en FuelCMS usando CVE-2018-16763. Ejecuta comandos del sistema a través de una API con ?action=exec. Descarga...

CVE-2018-16763_fuel_cms_exploit

⚠️ Disclaimer This project is strictly for educational and ethical security research purposes only. All activities were performed in a controlled lab / CTF environment. Do not use the techniques described here on any system without proper authorization. 🎯 Objectives Identify potential attack...

CVE-2018-16763

CVE-2018-16763 CVE-2018-16763 FuelCMS 1.4 远程代码执行漏洞，该版本的FuelCMS至今仍然存在漏洞。...

CVE-2018-16763-Exploit-Python3

CVE-2018-16763 Vulnerabilidad de ejecución remota de código en FuelCMS 1.4.1 Este es un port a Python 3 de la vulnerabilidad en https://www.exploit-db.com/exploits/47138, creado por 0xd0ff9. Para ejecutar el exploit, solo modifica la variable url en el código con la URL objetivo que quieras ataca...

CVE-2026-30462

A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal...

CVE-2026-30459

An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message...

CVE-2026-30462

A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal...

CVE-2026-30462

A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal...

PT-2026-35455

A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal...

EUVD-2026-25881

A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal...

CVE-2026-30462

This CVE covers a path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 . Connected sources consistently identify the issue as a directory traversal risk within the Blocks component, affecting FuelCMS’s Blocks controller (e.g., Blocks.php). No concrete exploitation d...

CVE-2026-30462

A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal...

CVE-2026-30461

Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the /controllers/Installer.php and the function addgitsubmodule...

EUVD-2026-23231

An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message...

CVE-2026-30459

An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message...

PT-2026-33310

Name of the Vulnerable Software and Affected Versions Daylight Studio FuelCMS version 1.5.2 Description An issue in the Forgot Password feature allows unauthenticated attackers to obtain the password reset token of a victim user. The application fails to validate the Host header when constructing...