CVE-2026-2898 | Medium | 5.5 | 2026-02-22 | A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloudService.php of the… |
CVE-2026-2897 | Low | 2.4 | 2026-02-22 | A security vulnerability has been detected in funadmin up to 7.1.0-rc4. This vulnerability affects unknown code of the file app/backend/view/index/index.html o… |
CVE-2026-2896 | High | 7.3 | 2026-02-22 | A weakness has been identified in funadmin up to 7.1.0-rc4. This affects the function setConfig of the file app/backend/controller/Ajax.php of the component Co… |
CVE-2026-2895 | Low | 3.7 | 2026-02-21 | A security flaw has been discovered in funadmin up to 7.1.0-rc4. Affected by this issue is the function repass of the file app/frontend/controller/Member.php… |
CVE-2026-2894 | Medium | 5.3 | 2026-02-21 | A vulnerability was identified in funadmin up to 7.1.0-rc4. Affected by this vulnerability is the function getMember of the file app/frontend/view/login/forget… |
CVE-2024-48228 | Medium | 6.1 | 2024-10-25 | An issue was found in funadmin 5.0.2. The selectfiles method in \backend\controller\sys\Attachh.php directly stores the passed parameters and values into the p… |
CVE-2024-48230 | High | 7.2 | 2024-10-25 | funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php. |
CVE-2024-48229 | High | 7.2 | 2024-10-25 | funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin. |
CVE-2024-48227 | Medium | 4.9 | 2024-10-25 | Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service (DOS). |
CVE-2024-48226 | High | 7.2 | 2024-10-25 | Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield. |
CVE-2024-48225 | Medium | 6.5 | 2024-10-25 | Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile. |
CVE-2024-48224 | Medium | 4.9 | 2024-10-25 | Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile. |
CVE-2024-48223 | High | 7.2 | 2024-10-25 | Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist. |
CVE-2024-48222 | High | 7.2 | 2024-10-25 | Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit. |
CVE-2024-48218 | High | 7.2 | 2024-10-25 | Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list. |
CVE-2024-48231 | High | 7.2 | 2024-10-21 | Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php. |
CVE-2023-36097 | Critical | 9.8 | 2023-06-22 | funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install. |
CVE-2023-2477 | Low | 3.5 | 2023-05-02 | A vulnerability was found in Funadmin up to 3.2.3. It has been declared as problematic. Affected by this vulnerability is the function tagLoad of the file Cx.p… |
CVE-2023-24774 | Critical | 9.8 | 2023-03-10 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php. |
CVE-2023-24777 | Critical | 9.8 | 2023-03-08 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list. |
CVE-2023-24782 | Critical | 9.8 | 2023-03-08 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit. |
CVE-2023-24773 | Critical | 9.8 | 2023-03-08 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list. |
CVE-2023-24780 | Critical | 9.8 | 2023-03-08 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns. |
CVE-2023-24775 | Critical | 9.8 | 2023-03-07 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php. |
CVE-2023-24781 | Critical | 9.8 | 2023-03-07 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php. |
CVE-2023-24776 | Critical | 9.8 | 2023-03-06 | Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addon.php. |