Описание
Withdrawn Advisory: Daylight Studio FUEL-CMS SQLi Vulnerability
Withdrawn Advisory
This advisory has been withdrawn because this vulnerability does not affect a package in a supported ecosystem. This link has been maintained to preserve external references.
Original Description
SQL Injection vulnerability in file Base_module_model.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attackers to execute arbitrary code via the col parameter to function list_items.
Пакеты
Наименование
codeigniter/framework
composer
Затронутые версииВерсия исправления
<= 1.4.9
1.4.10
Связанные уязвимости
CVSS3: 8.8
nvd
больше 2 лет назад
SQL Injection vulnerability in file Base_module_model.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attackers to execute arbitrary code via the col parameter to function list_items.