← All advisories

Critical severity9.8CISA KEVNVD Advisory· Published Aug 13, 2020· Updated Jun 17, 2026

CVE-2020-17463

CVE-2020-17463

Description

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Thedaylightstudio/Fuel CMS
cpe:2.3:a:thedaylightstudio:fuel_cms:1.4.7:*:*:*:*:*:*:*
FUEL/FUEL CMSdescription

Patches

Vulnerability mechanics

References

5

packetstormsecurity.com/files/158840/Fuel-CMS-1.4.7-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
getfuelcms.comnvdVendor Advisory
github.com/daylightstudio/FUEL-CMS/releases/tag/1.4.8nvdRelease NotesThird Party Advisory
cwe.mitre.org/data/definitions/89.htmlnvdTechnical Description
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

0

No linked articles in our index yet.