fastadmin kayıtları
fastadmin üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %9,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-43117İstismar yok | fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access.fastadmin · fastadmin · CWE-434 | Kritik9,8 | — | %2,1 | 13 Ara 2021 |
35İzleyin | CVE-2020-25967İstismar yok | The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vulnerability.fastadmin · fastadmin · CWE-74 | Yüksek8,8 | — | %1,3 | 10 Ara 2020 |
35İzleyin | CVE-2019-17431İstismar yok | An issue was discovered in fastadmin 1.0.0.20190705_beta.fastadmin · fastadmin · CWE-352 | Yüksek8,8 | — | %0,6 | 10 Eki 2019 |
35İzleyin | CVE-2019-11077İstismar yok | FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI.fastadmin · fastadmin · CWE-352 | Yüksek8,8 | — | %0,6 | 10 Nis 2019 |
28İzleyin | CVE-2020-21665İstismar yok | In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injectiofastadmin · fastadmin · CWE-89 | Yüksek7,2 | — | %1,0 | 17 Kas 2020 |
26İzleyin | CVE-2024-7928Kavram kanıtı | FastAdmin lang path traversalfastadmin · fastadmin · CWE-22 | Orta5,3 | — | %16,9 | 19 Ağu 2024 |
26İzleyin | CVE-2019-17432İstismar yok | An issue was discovered in fastadmin 1.0.0.20190705_beta.fastadmin · fastadmin · CWE-79 | Orta6,5 | — | %0,5 | 10 Eki 2019 |
21İzleyin | CVE-2020-26609İstismar yok | fastadmin V1.0.0.20200506_beta contains a cross-site scripting (XSS) vulnerability which may allow an attacker to obtain administrator credefastadmin · fastadmin · CWE-79 | Orta5,4 | — | %0,9 | 23 Şub 2021 |
21İzleyin | CVE-2018-10268İstismar yok | An issue was discovered in FastAdmin V1.0.0.20180417_beta.fastadmin · fastadmin · CWE-79 | Orta5,4 | — | %0,5 | 21 Nis 2018 |
20İzleyin | CVE-2024-7453İstismar yok | FastAdmin Attachment Management Section 4 cross site scriptingfastadmin · fastadmin · CWE-79 | Orta5,1 | — | %0,4 | 4 Ağu 2024 |
8İzleyin | CVE-2025-14966İstismar yok | FastAdmin Backend Controller Backend.php selectpage sql injectionfastadmin · fastadmin · CWE-74 | Düşük2,0 | — | %0,4 | 19 Ara 2025 |
- CVE-2021-4311740Planlayın
fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access.
KritikCVSS 9,8İstismar yokEPSS %2fastadmin · fastadmin13 Ara 2021
- CVE-2020-2596735İzleyin
The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %1fastadmin · fastadmin10 Ara 2020
- CVE-2019-1743135İzleyin
An issue was discovered in fastadmin 1.0.0.20190705_beta.
YüksekCVSS 8,8İstismar yokEPSS %1fastadmin · fastadmin10 Eki 2019
- CVE-2019-1107735İzleyin
FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI.
YüksekCVSS 8,8İstismar yokEPSS %1fastadmin · fastadmin10 Nis 2019
- CVE-2020-2166528İzleyin
In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injectio
YüksekCVSS 7,2İstismar yokEPSS %1fastadmin · fastadmin17 Kas 2020
- CVE-2024-792826İzleyin
FastAdmin lang path traversal
OrtaCVSS 5,3Kavram kanıtıEPSS %17fastadmin · fastadmin19 Ağu 2024
- CVE-2019-1743226İzleyin
An issue was discovered in fastadmin 1.0.0.20190705_beta.
OrtaCVSS 6,5İstismar yokEPSS %1fastadmin · fastadmin10 Eki 2019
- CVE-2020-2660921İzleyin
fastadmin V1.0.0.20200506_beta contains a cross-site scripting (XSS) vulnerability which may allow an attacker to obtain administrator crede
OrtaCVSS 5,4İstismar yokEPSS %1fastadmin · fastadmin23 Şub 2021
- CVE-2018-1026821İzleyin
An issue was discovered in FastAdmin V1.0.0.20180417_beta.
OrtaCVSS 5,4İstismar yokEPSS %1fastadmin · fastadmin21 Nis 2018
- CVE-2024-745320İzleyin
FastAdmin Attachment Management Section 4 cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0fastadmin · fastadmin4 Ağu 2024
- CVE-2025-149668İzleyin
FastAdmin Backend Controller Backend.php selectpage sql injection
DüşükCVSS 2,0İstismar yokEPSS %0fastadmin · fastadmin19 Ara 2025