VulnCheck KEV: CVE-2024-7928

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploi...

Exploit for Path Traversal in Fastadmin

CVE-2024-7928: FastAdmin Installation bash g...

FastAdmin Path Traversal Vulnerability

FastAdmin is a set of web backend development framework based on ThinkPHP and Bootstrap. FastAdmin suffers from a path traversal vulnerability, which stems from the program failing to properly filter special elements in the path of a resource or file. An attacker can exploit this vulnerability to...

TpMeCMS Cross-Site Scripting Vulnerability

TpMeCMS is a CMS developed on the FastAdmin framework. TpMeCMS version 1.3.3.2 suffers from a cross-site scripting vulnerability, which originates from the lack of effective filtering and escaping of user-supplied data in the parameter Site Name/Beian/Contact address/copyright/technical support i...

Exploit for Path Traversal in Fastadmin

CVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve...

Exploit for Path Traversal in Fastadmin

CVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve...

Exploit for Path Traversal in Fastadmin

CVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve...

CVE-2024-7928

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploi...

CVE-2024-7928 FastAdmin lang path traversal

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploi...

CVE-2024-7928 FastAdmin lang path traversal

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploi...

CVE-2024-7928 FastAdmin lang path traversal

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploi...

CVE-2024-7928

FastAdmin CVE-2024-7928 affects the application up to version 1.3.3.20220121, where the /index/ajax/lang parameter is vulnerable to path traversal due to improper filtering. The issue can be triggered remotely and has publicly disclosed exploits/POCs. Upgrading to version 1.3.4.20220530 (or later...

PT-2024-5821

Name of the Vulnerable Software and Affected Versions FastAdmin versions prior to 1.3.4.20220530 Description A problematic issue exists in FastAdmin related to improper path restriction within the /index/ajax/lang component. This allows for path traversal, potentially enabling remote attackers to...

FastAdmin path traversal vulnerability

FastAdmin is a set of web backend development framework based on ThinkPHP and Bootstrap. FastAdmin suffers from a path traversal vulnerability, which stems from the program failing to properly filter special elements in the path of a resource or file. An attacker can exploit this vulnerability to...

CVE-2024-7928: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploi...

CVE-2024-7453

A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects unknown code of the file /adminsurl.php/general/attachment/edit/ids/4?dialog=1 of the component Attachment Management Section. The manipulation of the argument...

CVE-2024-7453 FastAdmin Attachment Management Section 4 cross site scripting

A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects unknown code of the file /adminsurl.php/general/attachment/edit/ids/4?dialog=1 of the component Attachment Management Section. The manipulation of the argument...

CVE-2024-7453 FastAdmin Attachment Management Section 4 cross site scripting

A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects unknown code of the file /adminsurl.php/general/attachment/edit/ids/4?dialog=1 of the component Attachment Management Section. The manipulation of the argument...

CVE-2024-7453 FastAdmin Attachment Management Section 4 cross site scripting

A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects unknown code of the file /adminsurl.php/general/attachment/edit/ids/4?dialog=1 of the component Attachment Management Section. The manipulation of the argument...

CVE-2024-7453

CVE-2024-7453 affects FastAdmin 1.5.0.20240328, specifically the Attachment Management Section. The vulnerability arises from manipulation of the arguments row[url], row[imagewidth], and row[imageheight] in the file /[admins url].php/general/attachment/edit/ids/4?dialog=1, leading to cross-site s...