VendorsThe Daylight Studiofuel_cms1.5.0
Vulnerabilities

The Daylight Studio FUEL CMS 1.5.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2021-38727
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items
Published 2021-09-09 · Modified
9.8EPSS 0.016
CVE-2021-44117
A Cross Site Request Forgery (CSRF) vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/sitevariables/delete/4.
Published 2022-06-10 · Modified
8.8EPSS 0.014
CVE-2021-38723
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items
Published 2021-09-09 · Modified
8.8EPSS 0.010
CVE-2021-38721
FUEL CMS 1.5.0 login.php contains a cross-site request forgery (CSRF) vulnerability
Published 2021-09-09 · Modified
6.5EPSS 0.006
CVE-2021-38725
Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php
Published 2021-09-09 · Modified
5.3EPSS 0.009