FA
Product
FastAdmin
13
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 6Medium 6Low 0
Watch
Add FastAdmin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-43117 | 9.8 | Dec 13 | fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access Affected: 1.2.1 |
| CVE-2020-25967 | 8.8 | Dec 10 | The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vulnerability Affected: 1.0.0.20200506 |
| CVE-2019-17431 | 8.8 | Oct 10 | An issue was discovered in fastadmin 1.0.0.20190705_beta Affected: 1.0.0.20190705 |
| CVE-2019-11077 | 8.8 | Apr 11 | FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI Affected: 1.0.0.20190111 |
| CVE-2024-7928 | 7.5 | Aug 19 | A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121 Affected: before 1.3.4.20220530 |
| CVE-2025-14966 | 7.2 | Dec 19 | FastAdmin Backend Controller Backend.php selectpage sql injection Affected: 1.7.0.20250506 |
| CVE-2020-21665 | 7.2 | Nov 17 | In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injection in URL /admin/ajax/weigh Affected: 1.0.0.20191212 |
| CVE-2026-102247 | 6.8 | Sep 29 | FastAdmin Database Management database.php unnecessary privileges Affected: 1.6.1.20250430; 1.6.5.20260602 |
| CVE-2019-17432 | 6.5 | Oct 10 | An issue was discovered in fastadmin 1.0.0.20190705_beta Affected: 1.0.0.20190705 |
| CVE-2020-26609 | 5.4 | Feb 23 | fastadmin V1.0.0.20200506_beta contains a cross-site scripting (XSS) vulnerability which may allow an attacker to obtain administrator credentials to log in to the background Affected: 1.0.0.20200506 |
| CVE-2018-10268 | 5.4 | Apr 22 | An issue was discovered in FastAdmin V1.0.0.20180417_beta Affected: 1.0.0.20180417 |
| CVE-2024-7453 | 4.8 | Aug 4 | A vulnerability was found in FastAdmin 1.5.0.20240328 Affected: 1.5.0.20240328 |
| CVE-2026-86244 | 4.3 | Sep 7 | FastAdmin User Controller User.php login cross site scripting Affected: 1.2.0.20210401_beta |
Showing 13
