Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FUEL CMS 跨站请求伪造漏洞
Vulnerability Description
FUEL CMS是一款基于Codelgniter框架的内容管理系统（CMS）。 FUEL CMS 1.4.4版本中的Admin控制台的blocks/create/ Create Blocks部分存在跨站请求伪造漏洞。该漏洞源于WEB应用未充分验证请求是否来自可信用户。攻击者可利用该漏洞通过受影响客户端向服务器发送非预期的请求。
CVSS Information
N/A
Vulnerability Type
N/A