Description
Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | funadmin/funadmin | <= 5.0.2 | — | GHSA-vw6x-c5rg-jmjp |
Critical · 9.1
CVE-2024-48225
EUVD-2024-3145GHSA-vw6x-c5rg-jmjp
SQL injection in funadmin
Published Oct 25, 2024 · Updated Oct 28, 2024 · Assigned by mitre