Lucene search
+L

118 matches found

OSV
OSV
added 2024/08/19 10:15 p.m.8 views

CVE-2024-7928

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploi...

7.5CVSS6.7AI score
SaveExploits0References4
NVD
NVD
added 2024/08/19 10:15 p.m.21 views

CVE-2024-7928

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploi...

7.5CVSS0.16882EPSS
SaveExploits5References4
CVE
CVE
added 2024/08/19 9:31 p.m.154 views

CVE-2024-7928

FastAdmin CVE-2024-7928 affects the application up to version 1.3.3.20220121, where the /index/ajax/lang parameter is vulnerable to path traversal due to improper filtering. The issue can be triggered remotely and has publicly disclosed exploits/POCs. Upgrading to version 1.3.4.20220530 (or later...

7.5CVSS4.6AI score0.16882EPSS
SaveIn wildExploits5References4Affected Software1
Cvelist
Cvelist
added 2024/08/19 9:31 p.m.44 views

CVE-2024-7928 FastAdmin lang path traversal

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploi...

5.3CVSS0.16882EPSS
SaveExploits5References4
Vulnrichment
Vulnrichment
added 2024/08/19 9:31 p.m.22 views

CVE-2024-7928 FastAdmin lang path traversal

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploi...

5.3CVSS7.1AI score0.16882EPSS
SaveExploits5References4
CNNVD
CNNVD
added 2024/08/19 12:0 a.m.10 views

FastAdmin 路径遍历漏洞

FastAdmin is a set of web backend development framework based on ThinkPHP and Bootstrap. FastAdmin suffers from a path traversal vulnerability, which stems from the program failing to properly filter special elements in the path of a resource or file. An attacker can exploit this vulnerability to...

7.5CVSS6.7AI score0.16882EPSS
SaveExploits5References5
Positive Technologies
Positive Technologies
added 2024/08/19 12:0 a.m.6 views

PT-2024-5821

Name of the Vulnerable Software and Affected Versions FastAdmin versions prior to 1.3.4.20220530 Description A problematic issue exists in FastAdmin related to improper path restriction within the /index/ajax/lang component. This allows for path traversal, potentially enabling remote attackers to...

7.5CVSS5.3AI score0.16882EPSS
SaveExploits5References30
NVD
NVD
added 2024/08/04 5:16 a.m.43 views

CVE-2024-7453

A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects unknown code of the file /adminsurl.php/general/attachment/edit/ids/4?dialog=1 of the component Attachment Management Section. The manipulation of the argument...

5.1CVSS0.00448EPSS
SaveExploits1References5
OSV
OSV
added 2024/08/04 5:16 a.m.19 views

CVE-2024-7453

A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects unknown code of the file /adminsurl.php/general/attachment/edit/ids/4?dialog=1 of the component Attachment Management Section. The manipulation of the argument...

4.8CVSS6.3AI score
SaveExploits0References5
CVE
CVE
added 2024/08/04 4:31 a.m.46 views

CVE-2024-7453

CVE-2024-7453 affects FastAdmin 1.5.0.20240328, specifically the Attachment Management Section. The vulnerability arises from manipulation of the arguments row[url], row[imagewidth], and row[imageheight] in the file /[admins url].php/general/attachment/edit/ids/4?dialog=1, leading to cross-site s...

5.1CVSS3.7AI score0.00448EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/04 4:31 a.m.18 views

CVE-2024-7453 FastAdmin Attachment Management Section 4 cross site scripting

A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects unknown code of the file /adminsurl.php/general/attachment/edit/ids/4?dialog=1 of the component Attachment Management Section. The manipulation of the argument...

5.1CVSS6.3AI score0.00448EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/08/04 4:31 a.m.39 views

CVE-2024-7453 FastAdmin Attachment Management Section 4 cross site scripting

A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects unknown code of the file /adminsurl.php/general/attachment/edit/ids/4?dialog=1 of the component Attachment Management Section. The manipulation of the argument...

5.1CVSS0.00448EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/08/04 12:0 a.m.7 views

fastadmin 跨站脚本漏洞

fastadmin is a web backend development framework based on ThinkPHP and Bootstrap by Karson's personal developer. A cross-site scripting vulnerability exists in fastadmin 1.5.0.20240328, which stems from manipulation of parameters that can lead to cross-site scripting attacks...

5.1CVSS3.7AI score0.00448EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/08/04 12:0 a.m.13 views

PT-2024-38363 · Fastadmin · Fastadmin

Name of the Vulnerable Software and Affected Versions: FastAdmin version 1.5.0.20240328 Description: A vulnerability was found in the Attachment Management Section of the software, affecting the file /admins url.php/general/attachment/edit/ids/4?dialog=1. The issue arises from the manipulation of...

5.1CVSS3.9AI score0.00448EPSS
SaveExploits1References8
CNVD
CNVD
added 2021/12/15 12:0 a.m.50 views

fastadmin code problem vulnerability

fastadmin is a set of ThinkPHP and Bootstrap-based web backend development framework. fastadmin has a security vulnerability that stems from the fact that Fastadmin v1.2.1 is affected by a file upload vulnerability that allows execution of arbitrary code via shell access. No details of the...

10CVSS4.3AI score0.02095EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/13 12:15 p.m.5 views

CVE-2021-43117

fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...

10CVSS7.9AI score0.02095EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/13 12:15 p.m.14 views

CVE-2021-43117

fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...

9.8CVSS7.7AI score0.02095EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/13 12:15 p.m.20 views

CVE-2021-43117

fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...

10CVSS0.02095EPSS
SaveExploits1References1
Prion
Prion
added 2021/12/13 12:15 p.m.21 views

Design/Logic Flaw

fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...

10CVSS9.7AI score0.02095EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/13 11:31 a.m.35 views

CVE-2021-43117

fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...

9.9AI score0.02095EPSS
SaveExploits1References1
Rows per page
Query Builder