CVE-2026-30463

Mô tả

Tham khảo

• pentest-tools.com/PTT-2025-030%E2%80%93SQL-Injection-via-Password-Reset.pdf · Exploit

Lỗ hổng khác của fuel cms

• CVE-2026-30459CAO 7.1An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset toke…
• CVE-2026-30461CAO 8.3Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the /controllers/Ins…
• CVE-2026-30460CAO 8.8Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module.
• CVE-2026-30458NGHIÊM TRỌNG 9.1An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset tokens via a mail splitting attack.
• CVE-2026-30457NGHIÊM TRỌNG 9.8An issue in the /parser/dwoo component of Daylight Studio FuelCMS v1.5.2 allows attackers to execute arbitrary code via crafted PHP code.