Lucene search
K

4 matches found

OSV
OSV
added 2026/05/04 6:32 a.m.3 views

GHSA-QHH7-263P-54R3 Funadmin has an Improper Access Control Issue

A flaw has been found in funadmin up to 7.1.0-rc6. This affects the function UploadService::chunkUpload of the file app/common/service/UploadService.php of the component Frontend Chunked Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack is possible to ...

7.3CVSS6.6AI score0.00059EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2026/05/04 6:32 a.m.5 views

Funadmin has an Improper Access Control Issue

A flaw has been found in funadmin up to 7.1.0-rc6. This affects the function UploadService::chunkUpload of the file app/common/service/UploadService.php of the component Frontend Chunked Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack is possible to ...

7.5CVSS6.7AI score0.00059EPSS
Exploits0References8Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/04 4:45 a.m.1 views

CVE-2026-7733 funadmin Frontend Chunked Upload Endpoint UploadService.php chunkUpload unrestricted upload

A flaw has been found in funadmin up to 7.1.0-rc6. This affects the function UploadService::chunkUpload of the file app/common/service/UploadService.php of the component Frontend Chunked Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack is possible to ...

7.5CVSS6.7AI score0.00059EPSS
Exploits0References6
EUVD
EUVD
added 2026/05/04 4:45 a.m.4 views

EUVD-2026-26913

A flaw has been found in funadmin up to 7.1.0-rc6. This affects the function UploadService::chunkUpload of the file app/common/service/UploadService.php of the component Frontend Chunked Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack is possible to ...

7.5CVSS6.7AI score0.00059EPSS
Exploits0References6
Rows per page
Query Builder