Vendor

Daylight Studio

1 brief RSS

Fuel CMS 1.4.13 Blind SQL Injection Vulnerability (CVE-2021-47980)

Fuel CMS 1.4.13 is vulnerable to blind SQL injection via the 'col' parameter in the Activity Log interface, allowing authenticated attackers to manipulate database queries and extract information through time-based delays (CVE-2021-47980).

Fuel CMS 1.4.13 cve cve-2021-47980 sql-injection web-application

2r 1t 1c 1m ago