153 matches found
CVE-2020-21667
In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection...
SQL Injection
In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection...
CVE-2020-21667: Improper Neutralization of Special Elements used in an SQL Command
In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection...
File Upload Vulnerability in FastAdmin Fileix File Manager Backend
FastAdmin Fileix file manager is webix based file manager build, Fileix has an intuitive interface that allows you to work with any of your files or folders. A file upload vulnerability exists in the backend of FastAdmin Fileix File Manager. An attacker can exploit this vulnerability to upload...
Command execution vulnerability in FastAdmin backend (CNVD-2020-58827)
FastAdmin is an extremely fast backend development framework based on ThinkPHP and Bootstrap, and a permission management system based on Auth validation. FastAdmin backend has a command execution vulnerability that can be exploited by an attacker to gain control of the server...
CVE-2019-17432
An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/admin/general.config/edit CSRF vulnerability, as demonstrated by resultant XSS via the rowname parameter...
CVE-2019-17432
An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/admin/general.config/edit CSRF vulnerability, as demonstrated by resultant XSS via the rowname parameter...
CVE-2019-17431
An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability...
CVE-2019-17431
An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability...
Cross site request forgery (csrf)
An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/admin/general.config/edit CSRF vulnerability, as demonstrated by resultant XSS via the rowname parameter...
Cross site request forgery (csrf)
An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability...
CVE-2019-17431
An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability...
CVE-2019-17431
The CVE-2019-17431 entry concerns fastadmin version 1.0.0.20190705_beta, noting a CSRF vulnerability in the public/index.php/admin/auth/admin/add endpoint. The connected documents reiterate the same description and do not provide technical details on root cause, affected module internals, patch v...
CVE-2019-17432
An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/admin/general.config/edit CSRF vulnerability, as demonstrated by resultant XSS via the rowname parameter...
CVE-2019-17432
The CVE-2019-17432 issue affects fastadmin 1.0.0.20190705_beta, describing a public/admin/general.config/edit CSRF vulnerability that can result in XSS via the row[name] parameter. The connected sources consistently report the CSRF flaw in this specific version, with no additional details on expl...
CVE-2019-17432: Improper Neutralization of Input During Web Page Generation
An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/admin/general.config/edit CSRF vulnerability, as demonstrated by resultant XSS via the rowname parameter...
CVE-2019-17431: Cross-Site Request Forgery (CSRF)
An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability...
Arbitrary File Deletion Vulnerability in FastAdmi
FastAdmin is a system backend development framework based on ThinkPHP and Bootstrap. FastAdmin system backend arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files...
Code Execution Vulnerability in FastAdmin System Backend
FastAdmin is a system backend development framework based on ThinkPHP and Bootstrap. FastAdmin system backend code execution vulnerability, an attacker can exploit the vulnerability to obtain server privileges...
Arbitrary File Deletion Vulnerability in FastAdmin System Backend
FastAdmin is a system backend development framework based on ThinkPHP and Bootstrap. FastAdmin system backend arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files...