Skip to content
OpenAdvisories

Package · Packagist

funadmin/funadmin

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-48230

    SQL injection in funadmin

    funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2024-48229

    SQL injection in funadmin

    funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2024-48226

    SQL injection in funadmin

    Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2024-48218

    SQL injection in funadmin

    Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2024-48223

    SQL injection in funadmin

    Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.

    funadmin/funadmin Packagist
  • Critical 9.1
    CVE-2024-48225

    SQL injection in funadmin

    Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2024-48222

    SQL injection in funadmin

    Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2023-36097

    fuadmin vulnerable to insecure file upload

    funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2023-24774

    Funadmin vulnerable to SQL injection

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2023-24773

    SQL Injection in Funadmin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2023-24777

    SQL Injection in Funadmin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2023-24782

    SQL Injection in Funadmin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2023-24781

    SQL Injection in Funadmin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2023-24775 Public exploit EPSS 20%

    SQL Injection in Funadmin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2023-24780

    SQL Injection in Funadmin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2023-24776

    Remote code execution in Funadmin

    Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addon.php.

    funadmin/funadmin Packagist