CVE-2024-7928

CVE-2024-7928 CVE-2024-7928에 대한 POC. FastAdmin 인스턴스의 DB 세부 정보를 검색하려고 시도합니다. 개요 이것은 CVE-2024-7928을 위한 대량 스캔 및 익스플로잇 도구입니다: FastAdmin 1.3.3.20220121까지는 인증되지 않은 공격자가 디렉토리 트래버설을 실행할 수 있습니다. 이 도구는 이 보안 연구를 기반으로 합니다. 사용 방법 스크립트 요구 사항 설치: pip install -r requirements.txt 단일 대상: python CVE-2024-7928.py -u...

FastAdmin < V1.3.4.20220530 - Path Traversal

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploi...

CVE-2024-7928

CVE-2024-7928 CVE-2024-7928에 대한 POC입니다. FastAdmin 인스턴스의 DB 세부 정보를 검색하려고 시도합니다. 사용 방법 FOFA : app="FASTADMIN" 스크립트 요구 사항 설치: pip install -r requirements.txt 단일 대상: python CVE-2024-7928.py -u https://target:9090 대량 스캔: python CVE-2024-7928.py -f file.txt 면책 조항 경고!!! 이 도구는 교육 및 연구 목적으로만 제공됩니다. 제작자는 이...

CVE-2024-7928

CVE-2024-7928: FastAdmin V1.3.4.20220530 임의 파일 읽기 취약점 CVEHunter 도구는 CVE-2024-7928에 대한 FastAdmin 인스턴스의 DB 세부 정보를 검색하기 위한 취약점 탐지 및 익스플로잇 도구로, 다른 PoC보다 정확성과 비동기 동시성을 제공합니다. 설치 git clone https://github.com/th3gokul/CVE-2024-7928.git cd CVE-2024-7928 pip install -r requirements.txt python3 cvehunter.p...

CVE-2026-102247

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

CVE-2026-102247

A vulnerability exists in FastAdmin versions 1.6.1.20250430 and 1.6.5.20260602 within the Database Management component. The flaw is located in an unknown function of the application/database.php file, which can be manipulated to result in execution with unnecessary privileges . This attack can b...

CVE-2026-102247 FastAdmin Database Management database.php unnecessary privileges

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

CVE-2026-102247 FastAdmin Database Management database.php unnecessary privileges

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

EUVD-2026-88620

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

CVE-2024-7928

FastAdmin 경로 순회 취약점 익스플로잇 FastAdmin 1.3.3.20220121까지에서 문제가 될 수 있는 취약점이 발견되었습니다. 이 문제는 파일 /index/ajax/lang의 알 수 없는 기능에 영향을 미칩니다. lang 인수의 조작은 경로 순회로 이어집니다. 공격은 원격으로 시작될 수 있습니다. 익스플로잇이 공개되어 사용될 수 있습니다. 버전 1.3.4.20220530으로 업그레이드하면 이 문제를 해결할 수 있습니다. 영향을 받는 구성 요소를 업그레이드하는 것이 권장됩니다...

CVE-2026-86244

A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...

CVE-2026-86244 FastAdmin User Controller User.php login cross site scripting

A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...

CVE-2026-86244 FastAdmin User Controller User.php login cross site scripting

A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...

CVE-2026-86244

FastAdmin up to 1.2.0.20210401_beta contains a cross-site scripting (XSS) vulnerability in the register/login function of application/index/controller/User.php (User Controller). Manipulating the url argument enables a remote attacker to execute arbitrary script in the user's browser, with a CVSS...

EUVD-2026-72191

A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...

CVE-2026-86244 FastAdmin User Controller User.php login cross site scripting

A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...

PT-2026-86595

Name of the Vulnerable Software and Affected Versions FastAdmin versions prior to 1.2.1.20210731 beta Description A remote cross site scripting issue exists in the User Controller component within the register/login function of the application/index/controller/User.php file. This occurs when the...

CVE-2026-86244: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...

CVE-2026-51775

SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the application/common/controller/Backend.php component...

CVE-2026-51775: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the application/common/controller/Backend.php component...