cve/2020/CVE-2020-26045.md
2024-06-09 00:33:16 +00:00

782 B

CVE-2020-26045

Description

FUEL CMS 1.4.11 allows SQL Injection via parameter 'name' in /fuel/permissions/create/. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

POC

Reference

Github

No PoCs found on GitHub currently.