Lucene search
FunadminFunadmin
3 matches found
CVE-2024-48231
Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php.
7.2CVSS7.6AI score0.00168EPSS
CVE-2024-48227
Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service (DOS).
7.5CVSS7.2AI score0.00343EPSS
CVE-2024-48224
Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile.
7.5CVSS7.2AI score0.0028EPSS