IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API

Vulnerabilidades de thedaylightstudio (CVE)

Registros CVE publicados para thedaylightstudio, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

fuel cms 9dwoo 1
9 resultados
7.1Alta
CVE-2021-47980

Fuel CMS 1.4.13 Blind SQL Injection via col Parameter

Getfuelcms Fuel CMS

Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'col' parameter in the Activity Log interface. Attackers can send requests to the logs endpoint w…

7.1Alta
CVE-2026-30459
thedaylightstudio fuel cms

An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message.

8.3Alta
CVE-2026-30461
thedaylightstudio fuel cms

Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the /controllers/Installer.php and the function add_git_submodule.

8.8Alta
CVE-2026-30460
thedaylightstudio fuel cms

Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module.

7.7Alta
CVE-2026-30463
thedaylightstudio fuel cms

Daylight Studio FuelCMS v1.5.2 was discovered to contain a SQL injection vulnerability via the /controllers/Login.php component.

9.1Crítica
CVE-2026-30458
thedaylightstudio fuel cms

An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset tokens via a mail splitting attack.

9.8Crítica
CVE-2026-30457
thedaylightstudio dwoo; thedaylightstudio fuel cms

An issue in the /parser/dwoo component of Daylight Studio FuelCMS v1.5.2 allows attackers to execute arbitrary code via crafted PHP code.

5.4Media
CVE-2024-57605
thedaylightstudio fuel cms

Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages components.