CVE-2020-24791

FUEL CMS 1.4.8 allows SQL injection via the 'fuel_replace_id' parameter in pages/replace/1. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

• CWE-89

• https://github.com/daylightstudio/FUEL-CMS/issues/561Exploit, Issue Tracking, Third Party Advisory
• https://github.com/leerina/vulnerability/blob/master/Fuel%20CMS%201.4.8%20SQLi%20vulnerability.txtExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/48778Exploit, Third Party Advisory, VDB Entry
• https://github.com/daylightstudio/FUEL-CMS/issues/561Exploit, Issue Tracking, Third Party Advisory
• https://github.com/leerina/vulnerability/blob/master/Fuel%20CMS%201.4.8%20SQLi%20vulnerability.txtExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/48778Exploit, Third Party Advisory, VDB Entry

Published

Mar 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-24765InterMind iMind Server through 3.13.65 allows remote unauthe…7.5
• CVE-2020-24769SQL injection vulnerability in takeconfirm.php in NexusPHP 1…9.8
• CVE-2020-24770SQL injection vulnerability in modrules.php in NexusPHP 1.5 …9.8
• CVE-2020-24771Incorrect access control in NexusPHP 1.5.beta5.20120707 allo…7.5
• CVE-2020-24772In Dreamacro Clash for Windows v0.11.4, an attacker could em…8.8
• CVE-2020-24786An issue was discovered in Zoho ManageEngine Exchange Report…9.8
• CVE-2020-24794Cross Site Scripting (XSS) vulnerability in Kentico before 1…6.1
• CVE-2020-24804Plaintext Password vulnerability in AddAdmin.py in cms-dev/c…6.5
• CVE-2020-24807The socket.io-file package through 2.0.31 for Node.js relies…7.8
• CVE-2020-24815A Server-Side Request Forgery (SSRF) affecting the PDF gener…6.5
• CVE-2020-24821A vulnerability in the dwarf::cursor::skip_form function of …5.5
• CVE-2020-24822A vulnerability in the dwarf::cursor::uleb function of Libel…5.5