303 matches found
CVE-2026-2894 funadmin forget.html getMember information disclosure
A vulnerability was identified in funadmin up to 7.1.0-rc4. Affected by this vulnerability is the function getMember of the file app/frontend/view/login/forget.html. Such manipulation leads to information disclosure. The attack may be launched remotely. The exploit is publicly available and might...
CVE-2026-2894
A vulnerability was identified in funadmin up to 7.1.0-rc4. Affected by this vulnerability is the function getMember of the file app/frontend/view/login/forget.html. Such manipulation leads to information disclosure. The attack may be launched remotely. The exploit is publicly available and might...
PT-2026-21399
Name of the Vulnerable Software and Affected Versions funadmin versions through 7.1.0-rc4 Description A security flaw exists in funadmin that allows for weak password recovery. The issue is located in the repass function within the app/frontend/controller/Member.php file. Manipulation of the forg...
FunAdmin 授权问题漏洞
FunAdmin is an open-source backend development system developed using ThinkPHP6 and Layui. Versions of FunAdmin prior to 7.1.0-rc4 contained authorization-related vulnerabilities. These vulnerabilities stemmed from incorrect handling of the forgetcode/vercode parameters in the...
FunAdmin 访问控制错误漏洞
FunAdmin is a lightweight and highly colorful backend development system based on ThinkPHP6+Layui. An access control error vulnerability exists in funadmin. The vulnerability stems from the lack of validation of user privileges in the function getMember in the file...
PT-2026-21398
Name of the Vulnerable Software and Affected Versions funadmin versions up to 7.1.0-rc4 Description A flaw exists in funadmin that could allow information disclosure. This issue is related to the getMember function within the app/frontend/view/login/forget.html file. The attack can be initiated...
PT-2026-21400
Name of the Vulnerable Software and Affected Versions funadmin versions up to 7.1.0-rc4 Description A weakness exists in funadmin that could lead to improper authorization. This is due to a manipulation possible in the setConfig function within the app/backend/controller/Ajax.php file of the...
EUVD-2023-1052
Malicious code in bioql PyPI...
EUVD-2023-1081
Malicious code in bioql PyPI...
EUVD-2023-1059
Malicious code in bioql PyPI...
EUVD-2023-1705
Malicious code in bioql PyPI...
EUVD-2023-1075
Malicious code in bioql PyPI...
EUVD-2023-0928
Malicious code in bioql PyPI...
EUVD-2023-0922
Malicious code in bioql PyPI...
EUVD-2023-33962
Malicious code in bioql PyPI...
EUVD-2023-1113
Malicious code in bioql PyPI...
CVE-2024-48227
Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service DOS...
CVE-2024-48223
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist...