Sploitus

38 exploited vulnerabilities in Fuel Cms

Vulnerabilities with publicly known exploits

Vendors
Fuel Cms, Daylight Studio, Thedaylightstudio, Git, Daybreak Studios
With known exploits
38
Affected Thedaylightstudio Fuel Cms versions
= 1.4.7, 1.5.2, 1.4.6, 1.5.0, 1.4.11, 1.4.8, 1.4.2, 1.4.13, 1.4.4, 1.4.3, 1.4, 1.5.1
Affected Thedaylightstudio Dwoo versions
= 1.1.0

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2020-17463 3 exploits
CVSS 10.0 CRITICAL 2020-08-12
Fuel CMS 1.4.7 SQL InjectionFuel CMS 1.4.7 - 'col' SQL Injection (Authenticated)
CVE-2026-30457
CVSS 9.8 CRITICAL 2026-03-26FIX AVAILABLE
CVE-2020-22153
CVSS 9.8 CRITICAL 2023-07-03
CVE-2020-22151
CVSS 9.8 CRITICAL 2023-07-03FIX AVAILABLE
CVE-2021-38727
CVSS 9.8 CRITICAL 2021-09-09
CVE-2020-26045
CVSS 9.8 CRITICAL 2021-01-05FIX AVAILABLE
CVE-2020-24791
CVSS 9.8 CRITICAL 2021-03-10FIX AVAILABLE
CVE-2018-16763 17 exploits
CVSS 9.8 CRITICAL 2018-09-09
thm_ctf📄 Fuel CMS 1.4.1 PHP Code Injection
CVE-2021-38290
CVSS 9.3 HIGH 2021-08-09FIX AVAILABLE
CVE-2026-30458
CVSS 9.1 CRITICAL 2026-03-26
CVE-2026-30460
CVSS 8.8 HIGH 2026-04-07FIX AVAILABLE
CVE-2023-33557
CVSS 8.8 HIGH 2023-06-09FIX AVAILABLE
CVE-2021-36570
CVSS 8.8 HIGH 2023-02-03
CVE-2021-36569
CVSS 8.8 HIGH 2023-02-03
CVE-2021-44117
CVSS 8.8 HIGH 2022-06-10
CVE-2021-38723
CVSS 8.8 HIGH 2021-09-09
CVE-2020-23722
CVSS 8.8 HIGH 2021-03-10
CVE-2019-15229
CVSS 8.8 HIGH 2019-08-19FIX AVAILABLE
CVE-2018-20188
CVSS 8.8 HIGH 2018-12-17FIX AVAILABLE
CVE-2018-16416
CVSS 8.8 HIGH 2018-09-03FIX AVAILABLE
CVE-2026-30461
CVSS 8.3 HIGH 2026-04-09
CVE-2026-30463
CVSS 7.7 HIGH 2026-03-26FIX AVAILABLE
CVE-2021-47980
CVSS 7.1 HIGH 2026-05-16
CVE-2026-30459
CVSS 7.1 HIGH 2026-04-16
CVE-2021-38721
CVSS 6.5 MEDIUM 2021-09-09FIX AVAILABLE
CVE-2026-38948
CVSS 5.4 MEDIUM 2026-04-28
CVE-2024-57605
CVSS 5.4 MEDIUM 2025-02-12FIX AVAILABLE
CVE-2024-25369
CVSS 5.4 MEDIUM 2024-02-22
CVE-2020-22152
CVSS 5.4 MEDIUM 2023-07-03FIX AVAILABLE
CVE-2022-28599
CVSS 5.4 MEDIUM 2022-05-03FIX AVAILABLE
CVE-2021-44607
CVSS 5.4 MEDIUM 2022-02-23FIX AVAILABLE
CVE-2020-26046
CVSS 5.4 MEDIUM 2021-01-05
CVE-2020-23721
CVSS 5.4 MEDIUM 2021-03-10
CVE-2019-15228
CVSS 5.4 MEDIUM 2019-08-19
CVE-2018-20137
CVSS 4.8 MEDIUM 2018-12-13FIX AVAILABLE
CVE-2018-20136
CVSS 4.8 MEDIUM 2018-12-13
CVE-2026-30462
CVSS 4.3 MEDIUM 2026-04-27
CVE-2020-28705
CVSS 4.3 MEDIUM 2021-03-10