Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2018-16763

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter.

Published
Last modified
published
Not listed in CISA KEV
3 on Exploit-DB, 24 proofs of concept on GitHub, 1 Nuclei template

Summary

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution.

Timeline

  1. CVE published
  2. Public exploit on Exploit-DB

    EDB-47138, EDB-49487, EDB-50477

  3. Record last updated
  4. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • n/a n/a

    Version range not reported

References 33

GitHub · daylightstudio/FUEL-CMS

0xd0ff9.wordpress.com

Exploit-DB

packetstormsecurity.com

GitHub · projectdiscovery/nuclei-templates

GitHub · ArtemCyberLab/Project-Exploiting-a-Vulnerability-in-Fuel-CMS-CVE-2018-16763-

GitHub · BrunoPincho/cve-2018-16763-rust

GitHub · Cyberuser-hash/CVE-2018-16763

GitHub · SOME-1HING/CVE-2018-16763

GitHub · ShadowR-Root/fuel-cms-cve-2018-16763-python3-port

GitHub · VitoBonetti/CVE-2018-16763

GitHub · altsun/CVE-2018-16763-FuelCMS-1.4.1-RCE

GitHub · antisecc/CVE-2018-16763

GitHub · bad-c0de/CVE-2018-16763_FuelCMS-1.4.1_RCE

GitHub · dinhbaouit/CVE-2018-16763

GitHub · estebanzarate/CVE-2018-16763-Fuel-CMS-1.4.1-Remote-Code-Execution-PoC

GitHub · fahise/cve-2018-16763

GitHub · gh0stuncle/CVE-2018-16763_fuel_cms_exploit

GitHub · h3x0v3rl0rd/CVE-2018-16763

GitHub · hikarihacks/CVE-2018-16763-exploit

GitHub · kaxm23/exploit_cms_fuel

GitHub · kxisxr/Bash-Script-CVE-2018-16763

GitHub · n3m1sys/CVE-2018-16763-Exploit-Python3

GitHub · not1cyyy/CVE-2018-16763

GitHub · p0dalirius/CVE-2018-16763-FuelCMS-1.4.1-RCE

GitHub · padsalatushal/CVE-2018-16763

GitHub · saccles/CVE_2018_16763_Proof_of_Concept

GitHub · shoamshilo/Fuel-CMS-Remote-Code-Execution-1.4--RCE--

GitHub · uwueviee/Fu3l-F1lt3r