Approved changes feed: RSS · Atom
cpe:2.3:a:thedaylightstudio:fuel_cms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Thedaylightstudio (2c618928-c5f4-53fe-a0ef-75814c776c2a) |
|---|---|
| Product | Fuel Cms (87f65c0e-5712-50af-b1c8-b6bffef6a330) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/daylightstudio/fuel-cms |
purl2cpe | 2026-06-01 10:16:27.202377 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-38290 |
vulnerable | 2026-06-08 05:32:55.833350 |
Details available
A host header attack vulnerability exists in FUEL CMS 1.5.0 through fuel/modules/fuel/config/fuel_constants.php and fuel/modules/fuel/libraries/Asset.php. An attacker can use a man in the middle attack such as phishing.
Published: 2021-08-09T10:58:28.000Z
Updated: 2024-08-04T01:37:16.465Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26167 |
vulnerable | 2026-06-08 05:23:50.758892 |
Details available
In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one.
Published: 2020-11-04T16:39:21.000Z
Updated: 2025-05-30T16:01:24.418Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15229 |
vulnerable | 2026-06-08 05:12:56.823943 |
Details available
FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page.
Published: 2019-08-19T23:29:04.000Z
Updated: 2024-08-05T00:42:01.114Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15228 |
vulnerable | 2026-06-08 05:12:56.823544 |
Details available
FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account but can also impact unauthenticated visitors.
Published: 2019-08-19T23:28:53.000Z
Updated: 2024-08-05T00:42:02.687Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16763 |
vulnerable | 2026-06-08 05:11:05.458788 |
Details available
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution.
Published: 2018-09-09T21:00:00.000Z
Updated: 2024-08-05T10:32:54.076Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16762 |
vulnerable | 2026-06-08 05:11:05.458307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.