Getfuelcms vulnerabilities (CVE)

CVE records published for Getfuelcms, newest first. Follow to get an email when a new one appears.

1 results

7.1High

CVE-2021-47980 6 months ago

Fuel CMS 1.4.13 Blind SQL Injection via col Parameter

Getfuelcms Fuel CMS

Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'col' parameter in the Activity Log interface. Attackers can send requests to the logs endpoint w…