77 matches found
CVE-2024-48226
Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield...
CVE-2024-48227: Undefined Security Weakness
Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service DOS...
CVE-2024-48226: Improper Neutralization of Special Elements used in an SQL Command
Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield...
CVE-2024-48229: Improper Neutralization of Special Elements used in an SQL Command
funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin...
CVE-2024-48223: Improper Neutralization of Special Elements used in an SQL Command
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist...
CVE-2024-48218: Improper Neutralization of Special Elements used in an SQL Command
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list...
CVE-2024-48227
Funadmin version 5.0.2 is susceptible to a Denial of Service (DoS) vulnerability due to a logical flaw in the Curd one-click command deletion function . Specifically, an attacker can exploit the getSystemTable and Delete methods within the common.php file to delete critical commands, thereby disr...
PT-2024-33033 · Funadmin · Funadmin
Name of the Vulnerable Software and Affected Versions: Funadmin version 5.0.2 Description: The issue is a SQL injection vulnerability located in the /curd/table/fieldlist API endpoint. This allows for potential exploitation by injecting malicious SQL code. No information is provided about the...
CVE-2024-48229
funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin...
CVE-2024-48225
The funadmin/funadmin framework, specifically version 5.0.2 , is vulnerable to SQL Injection and Arbitrary File Deletion . The root cause is a lack of proper access control and insecure handling within the delfile method located in controller\Index.php (accessible via the /curd/index/delfile endp...
CVE-2024-48227
Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service DOS...
CVE-2024-48229
funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin...
PT-2024-33034 · Funadmin · Funadmin
Name of the Vulnerable Software and Affected Versions: Funadmin version 5.0.2 Description: The issue is related to an arbitrary file read vulnerability. It affects the /curd/index/editfile endpoint. There is no information provided about the estimated number of potentially affected devices...
FunAdmin 安全漏洞
FunAdmin is FunAdmin open source a lightweight and high-color backend development system based on ThinkPHP6+Layui development. A security vulnerability exists in FunAdmin version 5.0.2, which originates from an arbitrary file read vulnerability in /curd/index/editfile...
FunAdmin 安全漏洞
FunAdmin is FunAdmin open source a lightweight and high-color backend development system based on ThinkPHP6+Layui development. A security vulnerability exists in FunAdmin version 5.0.2, which originates from an SQL injection vulnerability in curd/table/savefield...
FunAdmin 安全漏洞
FunAdmin is FunAdmin open source a lightweight and high-color backend development system based on ThinkPHP6+Layui development. A security vulnerability exists in FunAdmin version 5.0.2, which stems from a logic flaw in the Curd one-click command delete function that could lead to a denial of...
CVE-2024-48222
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit...
CVE-2024-48229
funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin...