← All advisories

Critical severity9.8OSV Advisory· Published Sep 9, 2018· Updated Jun 17, 2026

CVE-2018-16762

CVE-2018-16762

Description

FUEL CMS 1.4.1 allows SQL Injection via the layout, published, or search_term parameter to pages/items.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Daylight Studio/FuelCMSOSV
Range: 1.0.3, 1.0.4, 1.0.5, …
Thedaylightstudio/Fuel CMS2 versions
cpe:2.3:a:thedaylightstudio:fuel_cms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:thedaylightstudio:fuel_cms:*:*:*:*:*:*:*:*range: <=1.4.2
- (no CPE)range: = 1.4.1

Patches

Vulnerability mechanics

References

1

github.com/daylightstudio/FUEL-CMS/issues/478nvdPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.