CVE-2024-7928

🗓️ 19 Aug 2024 21:31:06Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 153 Views🌐 WEB

Vulnerability in FastAdmin up to 1.3.3.20220121 versio

Reporter	Title	Published	Views	Family All 16
GithubExploit	Exploit for Path Traversal in Fastadmin	20 Aug 202412:15	–	githubexploit
GithubExploit	Exploit for Path Traversal in Fastadmin	20 Aug 202412:15	–	githubexploit
GithubExploit	Exploit for Path Traversal in Fastadmin	20 Aug 202403:09	–	githubexploit
GithubExploit	Exploit for Path Traversal in Fastadmin	23 Aug 202415:50	–	githubexploit
BDU FSTEC	The vulnerability of the /index/ajax/lang component of the FastAdmin remote administration utility, which allows a hacker to expose protected information.	30 Aug 202400:00	–	bdu_fstec
Circl	CVE-2024-7928	20 Aug 202401:14	–	circl
CNNVD	FastAdmin 路径遍历漏洞	19 Aug 202400:00	–	cnnvd
CNVD	FastAdmin Path Traversal Vulnerability	21 Aug 202400:00	–	cnvd
Cvelist	CVE-2024-7928 FastAdmin lang path traversal	19 Aug 202421:31	–	cvelist
Nuclei	FastAdmin < V1.3.4.20220530 - Path Traversal	3 Aug 202604:01	–	nuclei

NVD

Vulners

Vulnrichment

Node

fastadmin fastadminRange<1.3.4.20220530

[
  {
    "vendor": "n/a",
    "product": "FastAdmin",
    "versions": [
      {
        "version": "1.3.3.20220121",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
wiki	www.wiki.shikangsi.com/post/share/da0292b8-0f92-4e6e-bdb7-73f47b901acd
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
lang	query param	index/ajax/lang	Path traversal via lang parameter allowing access to unintended files.	CWE-22

17 Jun 2026 08:21Current

4.6Medium risk

Vulners AI Score4.6

CVSS 3.14.3 - 7.5

CVSS 24

CVSS 45.3

CVSS 34.3

EPSS0.16882

SSVC