İçeriğe atla
Noroxi

funadmin kayıtları

funadmin üreticisine ait 26 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 24
  3. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

26 kayıt
  • CVE-2023-24775
    45Planlayın

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    funadmin · funadmin7 Mar 2023

  • CVE-2023-24776
    39İzleyin

    Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addon.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    funadmin · funadmin6 Mar 2023

  • CVE-2023-24774
    39İzleyin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    funadmin · funadmin10 Mar 2023

  • CVE-2023-36097
    39İzleyin

    funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install.

    KritikCVSS 9,8İstismar yokEPSS %1

    funadmin · funadmin22 Haz 2023

  • CVE-2023-24780
    39İzleyin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns.

    KritikCVSS 9,8İstismar yokEPSS %1

    funadmin · funadmin7 Mar 2023

  • CVE-2023-24777
    39İzleyin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.

    KritikCVSS 9,8İstismar yokEPSS %1

    funadmin · funadmin8 Mar 2023

  • CVE-2023-24773
    39İzleyin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list.

    KritikCVSS 9,8İstismar yokEPSS %1

    funadmin · funadmin8 Mar 2023

  • CVE-2023-24781
    39İzleyin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    funadmin · funadmin7 Mar 2023

  • CVE-2023-24782
    39İzleyin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit.

    KritikCVSS 9,8İstismar yokEPSS %1

    funadmin · funadmin8 Mar 2023

  • CVE-2024-48222
    28İzleyin

    Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.

    YüksekCVSS 7,2İstismar yokEPSS %1

    funadmin · funadmin25 Eki 2024

  • CVE-2024-48223
    28İzleyin

    Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.

    YüksekCVSS 7,2İstismar yokEPSS %1

    funadmin · funadmin25 Eki 2024

  • CVE-2024-48218
    28İzleyin

    Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.

    YüksekCVSS 7,2İstismar yokEPSS %1

    funadmin · funadmin25 Eki 2024

  • CVE-2024-48226
    28İzleyin

    Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield.

    YüksekCVSS 7,2İstismar yokEPSS %1

    funadmin · funadmin25 Eki 2024

  • CVE-2024-48231
    28İzleyin

    Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php.

    YüksekCVSS 7,2İstismar yokEPSS %1

    funadmin · funadmin21 Eki 2024

  • CVE-2024-48230
    28İzleyin

    funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php.

    YüksekCVSS 7,2İstismar yokEPSS %0

    funadmin · funadmin25 Eki 2024

  • CVE-2024-48229
    28İzleyin

    funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin.

    YüksekCVSS 7,2İstismar yokEPSS %0

    funadmin · funadmin25 Eki 2024

  • CVE-2024-48225
    26İzleyin

    Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile.

    OrtaCVSS 6,5İstismar yokEPSS %1

    funadmin · funadmin25 Eki 2024

  • CVE-2023-2477
    24İzleyin

    Funadmin Cx.php tagLoad cross site scripting

    OrtaCVSS 6,1İstismar yokEPSS %1

    funadmin · funadmin2 May 2023

  • CVE-2024-48228
    24İzleyin

    An issue was found in funadmin 5.0.2.

    OrtaCVSS 6,1İstismar yokEPSS %0

    funadmin · funadmin25 Eki 2024

  • CVE-2026-2894
    22İzleyin

    funadmin forget.html getMember information disclosure

    OrtaCVSS 5,5İstismar yokEPSS %1

    funadmin · funadmin21 Şub 2026

  • CVE-2026-2896
    22İzleyin

    funadmin Configuration Ajax.php setConfig improper authorization

    OrtaCVSS 5,5İstismar yokEPSS %0

    funadmin · funadmin21 Şub 2026

  • CVE-2024-48224
    19İzleyin

    Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile.

    OrtaCVSS 4,9İstismar yokEPSS %1

    funadmin · funadmin25 Eki 2024

  • CVE-2024-48227
    19İzleyin

    Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service (DOS).

    OrtaCVSS 4,9İstismar yokEPSS %1

    funadmin · funadmin25 Eki 2024

  • CVE-2026-2895
    11İzleyin

    funadmin Member.php repass password recovery

    DüşükCVSS 2,9İstismar yokEPSS %1

    funadmin · funadmin21 Şub 2026

  • CVE-2026-2898
    8İzleyin

    funadmin Backend Endpoint AuthCloudService.php getMember deserialization

    DüşükCVSS 2,0Kavram kanıtıEPSS %0

    funadmin · funadmin21 Şub 2026