CVE-2024-48226

Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield...

CVE-2024-48222

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit...

CVE-2024-48223

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist...

CVE-2024-48224

Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile...

PT-2024-33039 · Unknown +1 · Curd One Click Command Mode Plugin +1

Name of the Vulnerable Software and Affected Versions: funadmin version 5.0.2 Description: The issue is related to a SQL injection vulnerability in the Curd one click command mode plugin. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

CVE-2024-48223

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist...

FunAdmin 安全漏洞

FunAdmin is FunAdmin open source a lightweight and high-color backend development system based on ThinkPHP6+Layui development. A security vulnerability exists in FunAdmin version 5.0.2, which originates from an SQL injection vulnerability in the Curd one-click command mode plugin...

CVE-2024-48226

Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield...

CVE-2024-48227

Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service DOS...

CVE-2024-48226

Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield...

CVE-2024-48225

Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile...

CVE-2024-48225: Undefined Security Weakness

Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile...

CVE-2024-48222

Funadmin v5.0.2 is vulnerable to a SQL injection vulnerability within the /curd/table/edit API endpoint, specifically involving the edit method in the controller able.php file. This flaw allows an attacker to manipulate SQL queries, potentially leading to unauthorized access or modification of da...

FunAdmin 安全漏洞

FunAdmin is FunAdmin open source a lightweight and high-color backend development system based on ThinkPHP6+Layui development. A security vulnerability exists in FunAdmin version 5.0.2, which originates from an SQL injection vulnerability in /curd/table/list...

CVE-2024-48229

The funadmin backend development system (version 5.0.2 ) is vulnerable to a SQL injection flaw within the Curd one click command mode plugin . The root cause is identified as improper authorization via the add method in the controller\Index.php file. An attacker can exploit this to manipulate SQL...

CVE-2024-48218

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list...

PT-2024-33033 · Funadmin · Funadmin

Name of the Vulnerable Software and Affected Versions: Funadmin version 5.0.2 Description: The issue is a SQL injection vulnerability located in the /curd/table/fieldlist API endpoint. This allows for potential exploitation by injecting malicious SQL code. No information is provided about the...

CVE-2024-48218

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list...

CVE-2024-48225

The funadmin/funadmin framework, specifically version 5.0.2 , is vulnerable to SQL Injection and Arbitrary File Deletion . The root cause is a lack of proper access control and insecure handling within the delfile method located in controller\Index.php (accessible via the /curd/index/delfile endp...

CVE-2024-48227

Funadmin version 5.0.2 is susceptible to a Denial of Service (DoS) vulnerability due to a logical flaw in the Curd one-click command deletion function . Specifically, an attacker can exploit the getSystemTable and Delete methods within the common.php file to delete critical commands, thereby disr...