coldbraid

CVE-2020-17463 Fuel CMS Fuel CMS

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

CVSS
not scored

CWE-89

On CISA’s exploited list

Fuel CMS SQL Injection Vulnerability

Added
2021-12-10
Federal patch deadline
2022-06-10
Ransomware use
not known