Skip to content
OpenAdvisories

Package · Packagist

funadmin/funadmin

26 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-2898 Public exploit

    funadmin Backend Endpoint AuthCloudService.php getMember deserialization

    A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloudService.php of the component Backend Endpoint. The manipulation of the argument cloud_account results in deserializatio…

  • Critical 9.8
    CVE-2023-24775 Public exploit EPSS 20%

    SQL Injection in Funadmin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.