CVE-2024-48223

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist...

CVE-2024-48224

Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile...

PT-2024-33032 · Funadmin · Funadmin

Name of the Vulnerable Software and Affected Versions: Funadmin version 5.0.2 Description: The issue is a SQL injection vulnerability located in the /curd/table/edit API endpoint. This allows for potential exploitation by injecting malicious SQL code. Recommendations: For Funadmin version 5.0.2,...

CVE-2024-48218

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list...

CVE-2024-48224

Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile...

CVE-2024-48218

Funadmin v5.0.2 is vulnerable to SQL injection due to improper input sanitization in the /curd/table/list endpoint. Specifically, the vulnerability exists within the list method of the curd controller able.php file. An attacker can manipulate SQL queries to access or modify data within the databa...

CVE-2024-48222

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit...

FunAdmin 安全漏洞

FunAdmin is FunAdmin open source a lightweight and high-color backend development system based on ThinkPHP6+Layui development. A security vulnerability exists in FunAdmin version 5.0.2, which originates from a SQL injection vulnerability in /curd/table/edit...

CVE-2024-48226

Funadmin 5.0.2 is vulnerable to SQL Injection due to improper input validation in the curd/table/savefield functionality (specifically within the app\curd\controller\Table.php file). An attacker can exploit this flaw to manipulate database queries, potentially leading to unauthorized access to or...

CVE-2024-48224

Funadmin v5.0.2 is vulnerable to an arbitrary file read vulnerability within the /curd/index/editfile endpoint. Additionally, documentation indicates that the application is susceptible to SQL injection due to improper input sanitization in the editfile method located in the controller Index.php ...

CVE-2023-26956

onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code...

CVE-2023-26956

onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code...

PT-2023-20874

Name of the Vulnerable Software and Affected Versions onekeyadmin version 1.3.9 Description The issue is related to an arbitrary file read vulnerability. It affects the component "/admin1/curd/code". Recommendations For onekeyadmin version 1.3.9, consider restricting access to the...

CVE-2023-26956: Files or Directories Accessible to External Parties

onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code...

CVE-2023-26956

onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code...

CVE-2023-26956

onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code...

OneKeyAdmin 安全漏洞

OneKeyAdmin is About plug-in management system based on Thinkphp6+Element, website, applets, malls, CMS, APP, ERP, API interface a system to get it all done, no scaffolding out of the box! OneKeyAdmin v1.3.9 version of the existence of security vulnerabilities , the vulnerability stems from the...