Browse CVEs

MEDIUM 6.1 CVE-2024-48228 An issue was found in funadmin 5.0.2. The selectfiles method in \backend\controller\sys\Attachh.php directly stores the passed parameters and values … Funadmin No fix yet Fix from $1,6002024-10-25 HIGH 7.2 CVE-2024-48229 funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin. Funadmin Mitigation only Fix from $1,9502024-10-25 HIGH 7.2 CVE-2024-48230 funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php. Funadmin No fix yet Fix from $1,9502024-10-25 HIGH 7.2 CVE-2024-48218 Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list. Funadmin No fix yet Fix from $1,9502024-10-25 HIGH 7.2 CVE-2024-48222 Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit. Funadmin No fix yet Fix from $1,9502024-10-25 HIGH 7.2 CVE-2024-48223 Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist. Funadmin No fix yet Fix from $1,9502024-10-25 HIGH 7.2 CVE-2024-48226 Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield. Funadmin No fix yet Fix from $1,9502024-10-25 MEDIUM 6.5 CVE-2024-48225 Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile. Funadmin No fix yet Fix from $1,6002024-10-25 HIGH 7.2 CVE-2024-48231 Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php. Funadmin No fix yet Fix from $1,9502024-10-21 CRITICAL 9.8 CVE-2023-36097 funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install. Funadmin No fix yet Fix from $2,3002023-06-22 CRITICAL 9.8 CVE-2023-24774 Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php. Funadmin No fix yet Fix from $2,3002023-03-10 CRITICAL 9.8 CVE-2023-24777 Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list. Funadmin No fix yet Fix from $2,3002023-03-08 CRITICAL 9.8 CVE-2023-24782 Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit. Funadmin No fix yet Fix from $2,3002023-03-08 CRITICAL 9.8 CVE-2023-24773 Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list. Funadmin No fix yet Fix from $2,3002023-03-08 CRITICAL 9.8 CVE-2023-24780 Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns. Funadmin No fix yet Fix from $2,3002023-03-08 CRITICAL 9.8 CVE-2023-24775EPSS 20% Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php. Funadmin No fix yet Fix from $2,3002023-03-07 CRITICAL 9.8 CVE-2023-24781 Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php. Funadmin No fix yet Fix from $2,3002023-03-07 CRITICAL 9.8 CVE-2023-24776 Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addon.php. Funadmin No fix yet Fix from $2,3002023-03-06