Login Request a demo
FU
Product
funadmin
by Funadmin · last CVE May 4, 2026
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities27In the news0Timeline
Severity mix
Critical 10High 9Medium 8Low 0
Severity
All severities27Critical10High9Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add funadmin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-2895
8.1
0%
Feb 21
funadmin Member.php repass password recovery
Affected: 7.1.0-rc1; 7.1.0-rc2; 7.1.0-rc3; 7.1.0-rc4
CVE-2026-7733
7.3
0%
May 4
funadmin Frontend Chunked Upload Endpoint UploadService.php chunkUpload unrestricted upload
Affected: 7.1.0-rc1; 7.1.0-rc2; 7.1.0-rc3; 7.1.0-rc4; 7.1.0-rc5; 7.1.0-rc6
CVE-2024-48222
7.2
1%
Oct 25
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit
Affected: 5.0.2
CVE-2024-48223
7.2
1%
Oct 25
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist
Affected: 5.0.2
CVE-2024-48226
7.2
1%
Oct 25
Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield
Affected: 5.0.2
CVE-2024-48229
7.2
0%
Oct 25
funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin
Affected: 5.0.2
CVE-2024-48230
7.2
0%
Oct 25
funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php
Affected: 5.0.2
CVE-2024-48218
7.2
1%
Oct 25
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list
Affected: 5.0.2
CVE-2024-48231
7.2
0%
Oct 21
Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php
Affected: 5.0.2
Showing 9