Skip to content
OpenAdvisories

Package · Packagist

funadmin/funadmin

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.3
    CVE-2026-7733

    funadmin Frontend Chunked Upload Endpoint UploadService.php chunkUpload unrestricted upload

    A flaw has been found in funadmin up to 7.1.0-rc6. This affects the function UploadService::chunkUpload of the file app/common/service/UploadService.php of the component Frontend Chunked Upload Endpoint. This manipulation of the argument File causes unrestric…

    funadmin/funadmin Packagist
  • High 7.3
    CVE-2026-2896

    funadmin Configuration Ajax.php setConfig improper authorization

    A weakness has been identified in funadmin up to 7.1.0-rc4. This affects the function setConfig of the file app/backend/controller/Ajax.php of the component Configuration Handler. Executing a manipulation can lead to improper authorization. The attack can be …

    funadmin/funadmin Packagist
  • High 7.5
    CVE-2024-48224

    SQL injection in funadmin

    Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile.

    funadmin/funadmin Packagist
  • High 7.5
    CVE-2024-48227

    Logic flaw in Funadmin

    Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service (DOS).

    funadmin/funadmin Packagist
  • High 7.2
    CVE-2024-48231

    SQL injection in funadmin

    Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php.

    funadmin/funadmin Packagist