CVE-2021-38727

Description

References

• daylightstudio/FUEL-CMS · Exploit
• streamable.com/lxw3ln · Broken Link
• nu11secur1ty.com/2021/10/cve-2021-38727.html · Broken Link

fuel cms의 다른 취약점

• CVE-2026-30459높음 7.1An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset toke…
• CVE-2026-30461높음 8.3Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the /controllers/Ins…
• CVE-2026-30460높음 8.8Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module.
• CVE-2026-30463높음 7.7Daylight Studio FuelCMS v1.5.2 was discovered to contain a SQL injection vulnerability via the /controllers/Login.php component.
• CVE-2026-30458심각 9.1An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset tokens via a mail splitting attack.