Skip to content
OpenAdvisories
Critical · 9.8 Known exploited Scanner template CVE-2020-17463 EUVD-2020-9415GHSA-h5p3-6ppq-r5h3

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

Published Aug 13, 2020 · Updated Oct 21, 2025 · Assigned by mitre

Description

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References