Skip to content
OpenAdvisories

Package · Packagist

funadmin/funadmin

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-2898 Public exploit

    funadmin Backend Endpoint AuthCloudService.php getMember deserialization

    A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloudService.php of the component Backend Endpoint. The manipulation of the argument cloud_account results in deserializatio…

    funadmin/funadmin Packagist
  • Medium 5.3
    CVE-2026-2894

    funadmin forget.html getMember information disclosure

    A vulnerability was identified in funadmin up to 7.1.0-rc4. Affected by this vulnerability is the function getMember of the file app/frontend/view/login/forget.html. Such manipulation leads to information disclosure. The attack may be launched remotely. The e…

    funadmin/funadmin Packagist
  • Medium 6.1
    CVE-2024-48228

    Funadmin Cross-site Scripting vulnerability

    An issue was found in funadmin 5.0.2. The selectfiles method in \backend\controller\sys\Attachh.php directly stores the passed parameters and values into the param parameter without filtering, resulting in Cross Site Scripting (XSS).

    funadmin/funadmin Packagist