CVE-2020-17463

Fuel CMS 1.4.7 suffers from SQL injection via the col parameter, allowing attackers to extract or manipulate database contents.

This SQL injection flaw in Fuel CMS 1.4.7 enables attackers to read, modify, or delete sensitive data stored in the database. DIB organizations must ensure their CMS platforms are patched and monitored for known vulnerabilities, as unpatched flaws like this are frequently exploited in the wild and can lead to data breaches or compliance violations under NIST 800-171.

Shame score — A known SQL injection vulnerability in an actively exploited CVE (KEV) indicates negligent patching and exposes sensitive data to theft or manipulation.