CVE-2021-38727

CRITICAL CVSS: 9.8 Published: 2021-09-09 Modified: 2026-06-17

Description

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items

Affected Platforms

Thedaylightstudio Fuel Cms

Weakness Type

CWE-89

References