CVE-2018-16763

Mô tả

Tham khảo

• packetstormsecurity.com/files/153696/fuelCMS-1.4.1-Remote-Code-Execution.html · Exploit
• packetstormsecurity.com/files/160080/Fuel-CMS-1.4-Remote-Code-Execution.html · Exploit
• packetstormsecurity.com/files/164756/Fuel-CMS-1.4.1-Remote-Code-Execution.html · Exploit
• 0xd0ff9.wordpress.com/2019/07/19/from-code-evaluation-to-pre-auth-remote-code-execution-cve-2018-16763-bypass · Exploit
• daylightstudio/FUEL-CMS · Issue Tracking
• exploit-db.com/exploits/47138 · Exploit

Lỗ hổng khác của fuel cms

• CVE-2026-30459CAO 7.1An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset toke…
• CVE-2026-30461CAO 8.3Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the /controllers/Ins…
• CVE-2026-30460CAO 8.8Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module.
• CVE-2026-30463CAO 7.7Daylight Studio FuelCMS v1.5.2 was discovered to contain a SQL injection vulnerability via the /controllers/Login.php component.
• CVE-2026-30458NGHIÊM TRỌNG 9.1An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset tokens via a mail splitting attack.