Show filters
9 Total Results
Displaying 1-9 of 9
Sort by:
Attacker Value
Unknown

CVE-2024-48230

Disclosure Date: October 25, 2024 (last updated November 01, 2024)
funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php.
Attacker Value
Unknown

CVE-2024-48229

Disclosure Date: October 25, 2024 (last updated November 01, 2024)
funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin.
Attacker Value
Unknown

CVE-2024-48227

Disclosure Date: October 25, 2024 (last updated November 01, 2024)
Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service (DOS).
Attacker Value
Unknown

CVE-2024-48226

Disclosure Date: October 25, 2024 (last updated November 01, 2024)
Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield.
Attacker Value
Unknown

CVE-2024-48225

Disclosure Date: October 25, 2024 (last updated November 01, 2024)
Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile.
Attacker Value
Unknown

CVE-2024-48224

Disclosure Date: October 25, 2024 (last updated November 01, 2024)
Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile.
Attacker Value
Unknown

CVE-2024-48223

Disclosure Date: October 25, 2024 (last updated November 01, 2024)
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.
Attacker Value
Unknown

CVE-2024-48222

Disclosure Date: October 25, 2024 (last updated November 01, 2024)
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.
Attacker Value
Unknown

CVE-2024-48218

Disclosure Date: October 25, 2024 (last updated November 01, 2024)
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.