Description
Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | funadmin/funadmin | <= 5.0.2 | — | GHSA-6j8f-88mh-r9vq |
High · 7.5
CVE-2024-48224
EUVD-2024-2968GHSA-6j8f-88mh-r9vq
SQL injection in funadmin
Published Oct 25, 2024 · Updated Oct 29, 2024 · Assigned by mitre