Vulnerabilities > Thedaylightstudio > Fuel CMS > 1.4.12

DATE CVE VULNERABILITY TITLE RISK
2021-08-09 CVE-2021-38290 Injection vulnerability in Thedaylightstudio Fuel CMS
A host header attack vulnerability exists in FUEL CMS 1.5.0 through fuel/modules/fuel/config/fuel_constants.php and fuel/modules/fuel/libraries/Asset.php.
network
high complexity
thedaylightstudio CWE-74
8.1
8.1
2020-11-04 CVE-2020-26167 Unspecified vulnerability in Thedaylightstudio Fuel CMS
In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one.
network
low complexity
thedaylightstudio
critical
 9.8
9.8