Fastadmin

11 CVEs across 1 Fastadmin products. Browse Fastadmin vulnerabilities, severities, and proof-of-concept exploits.

Fastadmin products with known CVEs

ProductCVEs
Fastadmin11
Fastadmin CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-14966Medium4.72025-12-19A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file application/common/controller/Backend.php of…
CVE-2024-7928Medium4.32024-08-19A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of…
CVE-2024-7453Low2.42024-08-04A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects unknown code of the file /[admins_url].p…
CVE-2021-43117Critical9.82021-12-13fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access.
CVE-2020-26609Medium5.42021-02-23fastadmin V1.0.0.20200506_beta contains a cross-site scripting (XSS) vulnerability which may allow an attacker to obtain administrator credentials to log in to…
CVE-2020-25967High8.82020-12-10The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vulnerability.
CVE-2020-21665High7.22020-11-17In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injection in URL /admin/aja…
CVE-2019-17432Medium6.52019-10-10An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/admin/general.config/edit CSRF vulnerability, as demonstrated by resultant XSS via…
CVE-2019-17431High8.82019-10-10An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability.
CVE-2019-11077High8.82019-04-11FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI.
CVE-2018-10268Medium5.42018-04-22An issue was discovered in FastAdmin V1.0.0.20180417_beta. There is XSS via the application\api\controller\User.php avatar parameter.