Vulnerabilities > Thedaylightstudio > Fuel CMS > 1.4.7
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-08-09 | CVE-2021-38290 | Injection vulnerability in Thedaylightstudio Fuel CMS A host header attack vulnerability exists in FUEL CMS 1.5.0 through fuel/modules/fuel/config/fuel_constants.php and fuel/modules/fuel/libraries/Asset.php. | 8.1 |
| 2021-03-10 | CVE-2020-23722 | Authorization Bypass Through User-Controlled Key vulnerability in Thedaylightstudio Fuel CMS 1.4.7 An issue was discovered in FUEL CMS 1.4.7. | 8.8 |
| 2021-03-10 | CVE-2020-23721 | Cross-site Scripting vulnerability in Thedaylightstudio Fuel CMS 1.4.7 An issue was discovered in FUEL CMS V1.4.7. | 5.4 |
| 2020-11-04 | CVE-2020-26167 | Unspecified vulnerability in Thedaylightstudio Fuel CMS In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one. | 9.8 |
| 2020-08-13 | CVE-2020-17463 | SQL Injection vulnerability in Thedaylightstudio Fuel CMS 1.4.7 FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. | 9.8 |