CVE-2026-2894
CVE-2026-2894 · funadmin forget.html getMember information disclosure
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
A vulnerability was identified in funadmin up to 7.1.0-rc4. Affected by this vulnerability is the function getMember of the file app/frontend/view/login/forget.html. Such manipulation leads to information disclosure. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS 6.9 · Mittel · EPSS 0,5%
- Veröffentlicht
- Aktualisiert
Technologie-Stack: php
Betroffene Produkte und Versionen
funadmin
- Softwareversionen
- 7.1.0-rc1: Betroffen
- 7.1.0-rc2: Betroffen
- 7.1.0-rc3: Betroffen
- 7.1.0-rc4: Betroffen
Keine Korrektur veröffentlicht
funadmin/funadmin Packagist
- Softwareversionen
- v1.02
- v1.1
- v1.5.0
- v2.1.0
- v2.2
- v2.2.10
- v2.2.11
- v2.2.12
- v2.2.13
- v2.2.14
- v2.2.6
- v2.2.9
- v2.3
- v2.3.1
- v2.4.0
- v2.4.1
- v2.4.2
- v2.5.0
- v2.5.1
- v2.5.2
- v2.6.0
- v2.6.1
- v2.6.2
- v2.6.3
- v2.6.4
- v2.6.5
- v3.0
- v3.0.1
- v3.1.0
- v3.1.1
- v3.2.0
- v3.2.1
- v3.2.2
- v3.2.3
- v3.3.0
- v3.3.1
- v3.3.2
- v3.3.3
- v5.0.0
- v5.0.1
- v5.0.2
- v5.0.3
- v5.0.4
- v5.0.5
- v5.0.6
- v5.0.7
- v5.0.8
- v5.0.9
- v5.1.0
- v5.1.1
- v5.1.2
- v5.1.3
- v6.0.0
- v6.0.1
- v6.0.2
- v6.0.3
- v6.0.4
- v6.0.5
- v6.0.6
- v6.0.7
- v7.0.0
- v7.0.0_rc1
- v7.0.0_rc2
- v7.0.0_rc3
- v7.0.0_rc4
- v7.0.0_rc5
- v7.0.0_rc6
- v7.0.0_rc6.1
- v7.0.0_rc6.2
- v7.0.0_rc6.3
- v7.0.0_rc7
- v7.0.0_rc7.1
- v7.0.0_rc8.0
- v7.0.0_rc8.1
- v7.0.0_rc8.1.1
- v7.0.1
- v7.0.2
- v7.1.0-rc1
- v7.1.0-rc2
- v7.1.0-rc3
- v7.1.0-rc4
- Betroffene Versionsbereiche
- ECOSYSTEM: ≤ 7.1.0-rc4
Keine Korrektur veröffentlicht