CVE

CVE-2020-17463

Fuel CMS SQL Injection Vulnerability

Fuel CMS · Fuel CMS

Date added (CISA)

2021-12-10

Remediation due

2022-06-10

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.