CVE-2023-36097

CVE-2023-36097 affects FunAdmin v3.3.2 and v3.3.3. The issue is an insecure file upload in the plugin installation process, caused by insufficient validation/restrictions on uploaded plugin files. This vulnerability allows an attacker to upload malicious files via the local install mechanism, pot...

CVE-2023-24774

Funadmin 3.2.0 is affected by an SQL injection via the selectFields parameter in controller/auth/Auth.php. The vulnerability enables unauthenticated network-exposed exploitation with high impact on confidentiality, integrity and availability (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base 9...

CVE-2024-48231

Funadmin version 5.0.2 is vulnerable to SQL Injection due to the improper handling of the selectFields parameter within the index method of the ackend controller auth Auth.php file. An attacker can exploit this flaw to manipulate database queries, potentially leading to unauthorized access or da...

CVE-2024-48227

Funadmin version 5.0.2 is susceptible to a Denial of Service (DoS) vulnerability due to a logical flaw in the Curd one-click command deletion function . Specifically, an attacker can exploit the getSystemTable and Delete methods within the common.php file to delete critical commands, thereby disr...

CVE-2023-24773

CVE-2023-24773 affects Funadmin v3.2.0. The vulnerability is a SQL injection in the id parameter of the /databases/database/list endpoint. Public summaries consistently describe it as a high-severity issue (CVSS v3.1: 9.8, CRITICAL) with network attack vector, no authentication, and impact to con...

CVE-2023-2477

CVE-2023-2477 affects Funadmin up to version 3.2.3. The vulnerability lies in the function tagLoad in file Cx.php where manipulating the argument file enables Cross-Site Scripting (XSS) . Exploitation can be carried out remotely and public disclosures exist. A practical mitigation mentioned in so...

CVE-2023-24782

CVE-2023-24782 corresponds to a SQL injection vulnerability in Funadmin v3.2.0. The flaw is exploitable via the id parameter on the /databases/database/edit endpoint, allowing unauthorized access/manipulation of database content. The CVSS v3.1 metrics show a CRITICAL base score of 9.8 (Network ac...

CVE-2026-2895

CVE-2026-2895 affects funadmin up to 7.1.0-rc4. The vulnerability is in the function repass of the file app/frontend/controller/Member.php . Manipulating the arguments forget_code/vercode enables weak password recovery and allows remote exploitation . Reported exploitation is possible; the attack...

CVE-2023-24777

CVE-2023-24777 is a SQL injection vulnerability affecting Funadmin v3.2.0 exposed via the id parameter in the /databases/table/list endpoint. The root cause is unsafely handling the id input, enabling attack execution likely over network with no user interaction, and resulting in high confidentia...

CVE-2024-48218

Funadmin v5.0.2 is vulnerable to SQL injection due to improper input sanitization in the /curd/table/list endpoint. Specifically, the vulnerability exists within the list method of the curd controller able.php file. An attacker can manipulate SQL queries to access or modify data within the databa...

CVE-2023-24775

CVE-2023-24775 affects Funadmin v3.2.0. The issue is a SQL injection in the selectFields parameter of the file path \member\Member.php, enabling attacker-controlled SQL fragments. Public references (Red Hat, GHSA, OSV, NVD) reiterate the same vector and impact (high confidentiality, integrity, av...

CVE-2024-48224

Funadmin v5.0.2 is vulnerable to an arbitrary file read vulnerability within the /curd/index/editfile endpoint. Additionally, documentation indicates that the application is susceptible to SQL injection due to improper input sanitization in the editfile method located in the controller Index.php ...

CVE-2024-48222

Funadmin v5.0.2 is vulnerable to a SQL injection vulnerability within the /curd/table/edit API endpoint, specifically involving the edit method in the controller able.php file. This flaw allows an attacker to manipulate SQL queries, potentially leading to unauthorized access or modification of da...

CVE-2024-48226

Funadmin 5.0.2 is vulnerable to SQL Injection due to improper input validation in the curd/table/savefield functionality (specifically within the app\curd\controller\Table.php file). An attacker can exploit this flaw to manipulate database queries, potentially leading to unauthorized access to or...

CVE-2024-48229

The funadmin backend development system (version 5.0.2 ) is vulnerable to a SQL injection flaw within the Curd one click command mode plugin . The root cause is identified as improper authorization via the add method in the controller\Index.php file. An attacker can exploit this to manipulate SQL...

CVE-2024-48230

The funadmin 5.0.2 version is vulnerable to SQL Injection due to improper validation of the parentField parameter within the index method of the \backend\controller\auth\Auth.php file. An attacker can exploit this flaw to manipulate SQL queries, potentially allowing them to access or modify data ...

CVE-2023-24776

Funadmin v3.2.0 is affected by a remote code execution (RCE) vulnerability in the controllerAddon.php component (via \controller\Addon.php). NVD lists CVSS v3.1 base score 9.8 (CRITICAL) with network attack vector, no privileges, no user interaction required, and impact to confidentiality, integr...

CVE-2024-48225

The funadmin/funadmin framework, specifically version 5.0.2 , is vulnerable to SQL Injection and Arbitrary File Deletion . The root cause is a lack of proper access control and insecure handling within the delfile method located in controller\Index.php (accessible via the /curd/index/delfile endp...

CVE-2024-48228

The funadmin backend development system, version 5.0.2 , is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input. The root cause is located in the selectfiles method within the ackend railer ys ough.php (also cited as ackend railer ys ough.php or ackend railer ys ou...

CVE-2023-24781

Funadmin v3.2.0 is affected by a SQL injection vulnerability in the selectFields parameter used by member/MemberLevel.php. This CVE (CVE-2023-24781) is characterized by a high-severity impact (CVSS v3.1 base score 9.8) with attacker access over the network and no privileges required, indicating p...

CVE-2024-48223

Funadmin v5.0.2 is vulnerable to a SQL injection flaw in the /curd/table/fieldlist endpoint. The root cause is improper authorization within the controller\Table.php file's fieldlist method, which allows an attacker to manipulate SQL queries to access or modify database data . While the specific ...

CVE-2023-24780

Funadmin v3.2.0 contains a SQL injection vulnerability exposed via the id parameter in /databases/table/columns. CVSS v3.1 base score 9.8 (CRITICAL) with NETWORK attack vector, no user interaction. Impact: high on confidentiality, integrity, and availability. No remediation details are provided i...

CVE-2026-2896

Funadmin up to 7.1.0-rc4 is affected by CVE-2026-2896 due to a flaw in the setConfig function of app/backend/controller/Ajax.php (Configuration Handler). The issue allows remote manipulation to cause improper authorization. Exploitation is possible over the network with no privileges and no user ...

CVE-2026-2897

CVE-2026-2897 affects funadmin up to version 7.1.0-rc4, specifically in the Backend Interface code path (file: app/backend/view/index/index.html). The issue arises from manipulation of the Value argument, enabling cross-site scripting. Exploitation is remote and public exploits exist; vendor was ...

CVE-2026-2894

FunAdmin up to 7.1.0-rc4 is affected by an access-control error in the forget.html getMember function that enables information disclosure. The issue allows remote exploitation with publicly available exploit code. Multiple sources confirm the vulnerability in the same component and version range....

CVE-2026-2898

The CVE concerns funadmin up to 7.1.0-rc4, affecting the Backend Endpoint through the function getMember in app/common/service/AuthCloudService.php. The issue stems from deserialization triggered by manipulating the cloud_account argument, enabling a remote attack. The exploit is publicly availab...