A vulnerability was found in Funadmin up to 3.2.3. It has been declared as problematic. Affected by this vulnerability is the function tagLoad of the file Cx.php. The manipulation of the argument file leads to cross site scripting. The attack can be launched remotely. The exploit has been...
6.1CVSS
6AI Score
0.001EPSS
funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins...
9.8CVSS
9.4AI Score
0.001EPSS
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at...
9.8CVSS
9.8AI Score
0.001EPSS
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at...
9.8CVSS
9.8AI Score
0.001EPSS
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at...
9.8CVSS
9.8AI Score
0.001EPSS
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at...
9.8CVSS
9.8AI Score
0.001EPSS
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at...
9.8CVSS
9.8AI Score
0.001EPSS
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at...
9.8CVSS
9.8AI Score
0.001EPSS
Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component...
9.8CVSS
9.8AI Score
0.004EPSS
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at...
9.8CVSS
9.8AI Score
0.001EPSS