Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2021-36570

Disclosure Date: February 03, 2023 (last updated October 08, 2023)
Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /permissions/delete/2---.
Attacker Value
Unknown

CVE-2021-36569

Disclosure Date: February 03, 2023 (last updated October 08, 2023)
Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /users/delete/2.
Attacker Value
Unknown

CVE-2020-28705

Disclosure Date: March 10, 2021 (last updated February 22, 2025)
FUEL CMS 1.4.13 contains a cross-site request forgery (CSRF) vulnerability that can delete a page via a post ID to /pages/delete/3.