PT-2026-28400 · Fuel Cms · Fuel Cms

CVE-2026-30463 · Publicado 2026-03-26 · Atualizado 2026-03-29

Positive Technologies (AI Summary)

CVSS v3.1

7.7

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Daylight Studio FuelCMS version 1.5.2

Description FuelCMS version 1.5.2 contains a SQL injection issue through the /controllers/Login.php component. The vulnerability is located in the /controllers/Login.php component and allows for potential SQL injection attacks. The vulnerable parameter is not specified.

Recommendations Update FuelCMS to a newer version that addresses this issue. As a temporary workaround, consider restricting access to the /controllers/Login.php component.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-30463

Produtos afetados

Fuel Cms

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30463.json · Exploit
• 🔥 https://pentest-tools.com/PTT-2025-030%E2%80%93SQL-Injection-via-Password-Reset.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2026-30463 · Aviso do Fabricante
• http://daylight.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-30463 · Nota de Segurança
• https://twitter.com/CVEnew/status/2038135246261227601 · Publicação no Twitter
• http://fuelcms.com · Nota