.. / CVE-2020-17463

• SQLi
• Nuclei
• Web

Exploit for Fuel CMS 1.4.7 - SQL Injection (CVE-2020-17463)

Description:

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

Nuclei Template

View the template here CVE-2020-17463.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-17463.yaml

References: