128 matches found
CVE-2024-7928
FastAdmin ่ทฏๅพ้ๅๆผๆดๅฉ็จๅทฅๅ ท FastAdmin ่ณ 1.3.3.20220121 ็ๆฌไธญๅ็ฐไบไธไธช่ขซๅฝ็ฑปไธบๆ้ฎ้ข็ๆผๆดใๅๆญคๅฝฑๅ็ๆฏๆไปถ /index/ajax/lang ็ๆไธชๆช็ฅๅ่ฝใๅฏนๅๆฐ lang ็ๆไฝๅฏผ่ด่ทฏๅพ้ๅใๆปๅปๅฏ่ฝ่ฟ็จๅ่ตทใ่ฏฅๆผๆดๅฉ็จๅทฒๅ ฌๅผๆซ้ฒ๏ผๅฏ่ฝ่ขซไฝฟ็จใๅ็บงๅฐ็ๆฌ 1.3.4.20220530 ๅฏไปฅ่งฃๅณๆญค้ฎ้ขใๅปบ่ฎฎๅ็บงๅๅฝฑๅ็็ปไปถใ...
FastAdmin < V1.3.4.20220530 - Path Traversal
A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploi...
CVE-2024-7928
CVE-2024-7928 CVE-2024-7928 ็ๆฆๅฟต้ช่ฏ๏ผPOC๏ผใๅฐๅฐ่ฏ่ทๅ FastAdmin ๅฎไพ็ๆฐๆฎๅบ่ฏฆๆ ใ ๅฆไฝไฝฟ็จ FOFA ๆ็ดข่ฏญๅฅ๏ผapp="FASTADMIN" ๅฎ่ฃ ่ๆฌไพ่ต๏ผ root@kitploit: pip install -r requirements.txt ๅไธช็ฎๆ ๏ผ root@kitploit: python CVE-2024-7928.py -u https://target:9090 ๆน้ๆซๆ๏ผ root@kitploit: python CVE-2024-7928.py -f file.txt ๅ ่ดฃๅฃฐๆ ่ญฆๅ๏ผ๏ผ๏ผ...
CVE-2024-7928
CVE-2024-7928 PoC para CVE-2024-7928. Intentarรก recuperar detalles de la base de datos de instancias de FastAdmin. Resumen Esta es una herramienta de escaneo masivo y explotaciรณn para CVE-2024-7928: FastAdmin hasta la versiรณn 1.3.3.20220121 permite a atacantes no autenticados ejecutar un director...
CVE-2024-7928
CVE-2024-7928: FastAdmin V1.3.4.20220530 ไปปๆๆไปถ่ฏปๅๆผๆด CVEHunter ๅทฅๅ ท็จไบๆฃๆตๅๅฉ็จ CVE-2024-7928 ๆผๆด๏ผไปฅ็ฒพ็กฎไธๅผๆญฅๅนถๅ็ๆนๅผ๏ผไผไบๅ ถไป PoC๏ผๆฃ็ดข FastAdmin ๅฎไพ็ๆฐๆฎๅบ่ฏฆ็ปไฟกๆฏใ ๅฎ่ฃ root@kitploit: git clone https://github.com/th3gokul/CVE-2024-7928.git cd CVE-2024-7928 pip install -r requirements.txt python3 cvehunter.py --help ็จๆณ...
CVE-2026-86244
A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...
CVE-2026-86244
FastAdmin up to 1.2.0.20210401_beta contains a cross-site scripting (XSS) vulnerability in the register/login function of application/index/controller/User.php (User Controller). Manipulating the url argument enables a remote attacker to execute arbitrary script in the user's browser, with a CVSS...
CVE-2026-86244 FastAdmin User Controller User.php login cross site scripting
A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...
CVE-2026-86244 FastAdmin User Controller User.php login cross site scripting
A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...
CVE-2026-51775
SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the application/common/controller/Backend.php component...
CVE-2026-51775
CVE-2026-51775 is a SQL injection vulnerability in Fastadmin v1.6.1.20250430. The flaw occurs in the application/common/controller/Backend.php component and reportedly allows an attacker to execute arbitrary code. The NVD entry lists a high impact with CVSS 3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S...
CVE-2026-51775
SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the application/common/controller/Backend.php component...
EUVD-2026-52480
SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the application/common/controller/Backend.php component...
CVE-2019-11077
FastAdmin V1.0.0.20190111beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI...
CVE-2025-14966
A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file application/common/controller/Backend.php of the component Backend Controller. Executing a manipulation of the argument custom/searchField can lead to sql injection. It is possible to...
EUVD-2025-204610
A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file application/common/controller/Backend.php of the component Backend Controller. Executing manipulation of the argument custom/searchField can lead to sql injection. It is possible to...
CVE-2025-14966
A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file application/common/controller/Backend.php of the component Backend Controller. Executing a manipulation of the argument custom/searchField can lead to sql injection. It is possible to...
CVE-2025-14966
A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file application/common/controller/Backend.php of the component Backend Controller. Executing a manipulation of the argument custom/searchField can lead to sql injection. It is possible to...
CVE-2025-14966 FastAdmin Backend Controller Backend.php selectpage sql injection
A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file application/common/controller/Backend.php of the component Backend Controller. Executing a manipulation of the argument custom/searchField can lead to sql injection. It is possible to...
CVE-2025-14966 FastAdmin Backend Controller Backend.php selectpage sql injection
A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file application/common/controller/Backend.php of the component Backend Controller. Executing a manipulation of the argument custom/searchField can lead to sql injection. It is possible to...