Back to CVE Browser

CVE-2020-17463

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score71.1420%

EPSS Percentile86.75th

Published2020-08-13

Last Modified2025-11-07

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

Affected Platforms (CPE)

📦

Thedaylightstudio

Fuel Cms

= 1.4.7

References & Advisories

🔗 http://packetstormsecurity.com/files/158840/Fuel-CMS-1.4.7-SQL-Injection.html

🔗 https://cwe.mitre.org/data/definitions/89.html

🔗 https://getfuelcms.com

🔗 https://github.com/daylightstudio/FUEL-CMS/archive/master.zip

🔗 https://github.com/daylightstudio/FUEL-CMS/releases/tag/1.4.8

🔗 http://packetstormsecurity.com/files/158840/Fuel-CMS-1.4.7-SQL-Injection.html

🔗 https://cwe.mitre.org/data/definitions/89.html

🔗 https://getfuelcms.com

Related Vulnerabilities

Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting (XSS) in pageEditMember.php via the address field.

CVE-2026-667488.7

Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulnerability that allows users with cus...

CVE-2026-658817.5

Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle < 3.1.1 - The def...

CVE-2026-510787.5

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the file_manage_c...