| Package | Affected versions | Patched versions |
|---|---|---|
| fuel cms | = 1.4.8 |
FUEL CMS 1.4.8 allows SQL injection via the 'fuel_replace_id' parameter in pages/replace/1. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free