FU
Product
funadmin
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 9Medium 8Low 0
Watch
Add funadmin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-36097 | 9.8 | Jun 22 | funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install Affected: 3.3.2; 3.3.3 |
| CVE-2023-24774 | 9.8 | Mar 10 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php Affected: 3.2.0 |
| CVE-2023-24773 | 9.8 | Mar 8 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list Affected: 3.2.0 |
| CVE-2023-24782 | 9.8 | Mar 8 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit Affected: 3.2.0 |
| CVE-2023-24777 | 9.8 | Mar 8 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list Affected: 3.2.0 |
| CVE-2023-24781 | 9.8 | Mar 7 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php Affected: 3.2.0 |
| CVE-2023-24780 | 9.8 | Mar 7 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns Affected: 3.2.0 |
| CVE-2023-24775 | 9.8 | Mar 7 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php Affected: 3.2.0 |
| CVE-2023-24776 | 9.8 | Mar 6 | Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addon.php Affected: 3.2.0 |
| CVE-2026-2894 | 9.1 | Feb 21 | funadmin forget.html getMember information disclosure Affected: 7.1.0-rc1; 7.1.0-rc2; 7.1.0-rc3; 7.1.0-rc4 |
Showing 10