CVE-2020-24950

2023-08-1100:00:00

mitre

www.cve.org

remote attackers

arbitrary code execution

base module model

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

40.0%

JSON

SQL Injection vulnerability in file Base_module_model.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attackers to execute arbitrary code via the col parameter to function list_items.

References

github.com/daylightstudio/FUEL-CMS/issues/562