FU
Product
funadmin
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 9Medium 8Low 0
Watch
Add funadmin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-2898 | 6.5 | Feb 22 | funadmin Backend Endpoint AuthCloudService.php getMember deserialization Affected: 7.1.0-rc1; 7.1.0-rc2; 7.1.0-rc3; 7.1.0-rc4 |
| CVE-2024-48225 | 6.5 | Oct 25 | Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile Affected: 5.0.2 |
| CVE-2024-48228 | 6.1 | Oct 25 | An issue was found in funadmin 5.0.2 Affected: 5.0.2 |
| CVE-2023-2477 | 6.1 | May 2 | Funadmin Cx.php tagLoad cross site scripting Affected: through 3.2.3 |
| CVE-2026-2896 | 5.3 | Feb 21 | funadmin Configuration Ajax.php setConfig improper authorization Affected: 7.1.0-rc1; 7.1.0-rc2; 7.1.0-rc3; 7.1.0-rc4 |
| CVE-2024-48227 | 4.9 | Oct 25 | Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service (DOS) Affected: 5.0.2 |
| CVE-2024-48224 | 4.9 | Oct 25 | Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile Affected: 5.0.2 |
| CVE-2026-2897 | 4.8 | Feb 22 | funadmin Backend index.html cross site scripting Affected: 7.1.0-rc1; 7.1.0-rc2; 7.1.0-rc3; 7.1.0-rc4 |
Showing 8