FU
Vendor
Funadmin
27
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-7733 | FU funadmin Funadmin | 7.3 | May 4 | funadmin Frontend Chunked Upload Endpoint UploadService.php chunkUpload unrestricted upload |
| CVE-2026-2898 | FU funadmin Funadmin | 6.5 | Feb 22 | funadmin Backend Endpoint AuthCloudService.php getMember deserialization |
| CVE-2026-2897 | FU funadmin Funadmin | 4.8 | Feb 22 | funadmin Backend index.html cross site scripting |
| CVE-2026-2896 | FU funadmin Funadmin | 5.3 | Feb 21 | funadmin Configuration Ajax.php setConfig improper authorization |
| CVE-2026-2895 | FU funadmin Funadmin | 8.1 | Feb 21 | funadmin Member.php repass password recovery |
| CVE-2026-2894 | FU funadmin Funadmin | 9.1 | Feb 21 | funadmin forget.html getMember information disclosure |
| CVE-2024-48223 | FU Funadmin Funadmin | 7.2 | Oct 25 | Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist |
| CVE-2024-48218 | FU Funadmin Funadmin | 7.2 | Oct 25 | Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list |
| CVE-2024-48222 | FU Funadmin Funadmin | 7.2 | Oct 25 | Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit |
| CVE-2024-48224 | FU Funadmin Funadmin | 4.9 | Oct 25 | Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile |
| CVE-2024-48225 | FU Funadmin Funadmin | 6.5 | Oct 25 | Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile |
| CVE-2024-48226 | FU Funadmin Funadmin | 7.2 | Oct 25 | Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield |
| CVE-2024-48227 | FU Funadmin Funadmin | 4.9 | Oct 25 | Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service (DOS) |
| CVE-2024-48229 | FU Funadmin Funadmin | 7.2 | Oct 25 | funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin |
| CVE-2024-48230 | FU Funadmin Funadmin | 7.2 | Oct 25 | funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php |
| CVE-2024-48228 | FU Funadmin Funadmin | 6.1 | Oct 25 | An issue was found in funadmin 5.0.2 |
| CVE-2024-48231 | FU Funadmin Funadmin | 7.2 | Oct 21 | Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php |
| CVE-2023-36097 | FU Funadmin Funadmin | 9.8 | Jun 22 | funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install |
| CVE-2023-2477 | FU Funadmin Funadmin | 6.1 | May 2 | Funadmin Cx.php tagLoad cross site scripting |
| CVE-2023-24774 | FU Funadmin Funadmin | 9.8 | Mar 10 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php |
| CVE-2023-24777 | FU Funadmin Funadmin | 9.8 | Mar 8 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list |
| CVE-2023-24773 | FU Funadmin Funadmin | 9.8 | Mar 8 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list |
| CVE-2023-24782 | FU Funadmin Funadmin | 9.8 | Mar 8 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit |
| CVE-2023-24775 | FU Funadmin Funadmin | 9.8 | Mar 7 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php |
| CVE-2023-24781 | FU Funadmin Funadmin | 9.8 | Mar 7 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php |
| CVE-2023-24780 | FU Funadmin Funadmin | 9.8 | Mar 7 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns |
| CVE-2023-24776 | FU Funadmin Funadmin | 9.8 | Mar 6 | Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addon.php |