CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-08-13
FUEL CMS 1.4.7 SQL Injection Vulnerability (CVE-2020-17463) Security Advisory and Mitigation Guide
[Affected Scope] FUEL CMS versions 1.4.7 and prior
[Impact] Unauthenticated remote attackers can exploit this vulnerability to extract sensitive database information, hijack administrator sessions, or escalate to Remote Code Execution (RCE).
[Mitigation] Immediately upgrade FUEL CMS to the latest stable release (1.4.8 or higher) and apply WAF rules to block malicious payloads.