CVE-2019-17431

The CVE-2019-17431 entry concerns fastadmin version 1.0.0.20190705_beta, noting a CSRF vulnerability in the public/index.php/admin/auth/admin/add endpoint. The connected documents reiterate the same description and do not provide technical details on root cause, affected module internals, patch v...

CVE-2019-17431

An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability...

CVE-2019-17432

An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/admin/general.config/edit CSRF vulnerability, as demonstrated by resultant XSS via the rowname parameter...

CVE-2019-17432

The CVE-2019-17432 issue affects fastadmin 1.0.0.20190705_beta, describing a public/admin/general.config/edit CSRF vulnerability that can result in XSS via the row[name] parameter. The connected sources consistently report the CSRF flaw in this specific version, with no additional details on expl...

Arbitrary File Deletion Vulnerability in FastAdmi

FastAdmin is a system backend development framework based on ThinkPHP and Bootstrap. FastAdmin system backend arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files...

Code Execution Vulnerability in FastAdmin System Backend

FastAdmin is a system backend development framework based on ThinkPHP and Bootstrap. FastAdmin system backend code execution vulnerability, an attacker can exploit the vulnerability to obtain server privileges...

Arbitrary File Deletion Vulnerability in FastAdmin System Backend

FastAdmin is a system backend development framework based on ThinkPHP and Bootstrap. FastAdmin system backend arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files...

Cross site request forgery (csrf)

FastAdmin V1.0.0.20190111beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI...

CVE-2019-11077

FastAdmin V1.0.0.20190111beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI...

CVE-2019-11077

FastAdmin V1.0.0.20190111beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI...

CVE-2019-11077

FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability that allows adding a new admin user via the URI admin/auth/admin/add?dialog=1. Root cause: CSRF protection missing/insufficient. CVSSv3.1 base score 8.8 (High), network vector, user interaction required; confidentiality, integrity, and avail...

CVE-2019-11077

FastAdmin V1.0.0.20190111beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI...

FastAdmin Cross-Site Scripting Vulnerability

FastAdmin is a system backend development framework based on ThinkPHP and Bootstrap. A cross-site scripting vulnerability exists in FastAdmin version 1.0.0.20180417beta. A remote attacker can use the 'avatar' parameter to inject arbitrary web script or HTML...

CVE-2018-10268

An issue was discovered in FastAdmin V1.0.0.20180417beta. There is XSS via the application\api\controller\User.php avatar parameter...

CVE-2018-10268

An issue was discovered in FastAdmin V1.0.0.20180417beta. There is XSS via the application\api\controller\User.php avatar parameter...

Design/Logic Flaw

An issue was discovered in FastAdmin V1.0.0.20180417beta. There is XSS via the application\api\controller\User.php avatar parameter...

CVE-2018-10268

An issue was discovered in FastAdmin V1.0.0.20180417beta. There is XSS via the application\api\controller\User.php avatar parameter...

CVE-2018-10268

The CVE-2018-10268 entry affects FastAdmin v1.0.0.20180417_beta, where there is a cross-site scripting (XSS) vulnerability via the avatar parameter in application/api/controller/User.php. The issue is documented across multiple sources (CNVD, NVD, OSV, CVE records). Details consistently specify a...