CVE-2020-24791

FUEL CMS 1.4.8 allows SQL injection via the 'fuelreplaceid' parameter in pages/replace/1. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

CVE-2020-24791: Improper Neutralization of Special Elements used in an SQL Command

FUEL CMS 1.4.8 allows SQL injection via the 'fuelreplaceid' parameter in pages/replace/1. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

PT-2021-11072

Name of the Vulnerable Software and Affected Versions: FUEL CMS version 1.4.8 Description: The issue allows SQL injection via the fuel replace id parameter in the "pages/replace/1" endpoint. Exploiting this could allow an attacker to compromise the application, access or modify data, or exploit...