p PatchFirst

CVE-2023-24782

CVE-2023-24782

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit.

CVSS 9.8 · Critical · EPSS 0.7%

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • funadmin/funadmin Packagist

    Versions
    • v1.02
    • v1.1
    • v1.5.0
    • v2.1.0
    • v2.2
    • v2.2.10
    • v2.2.11
    • v2.2.12
    • v2.2.13
    • v2.2.14
    • v2.2.6
    • v2.2.9
    • v2.3
    • v2.3.1
    • v2.4.0
    • v2.4.1
    • v2.4.2
    • v2.5.0
    • v2.5.1
    • v2.5.2
    • v2.6.0
    • v2.6.1
    • v2.6.2
    • v2.6.3
    • v2.6.4
    • v2.6.5
    • v3.0
    • v3.0.1
    • v3.1.0
    • v3.1.1
    • v3.2.0
    Affected ranges
    • ECOSYSTEM: ≤ 3.2.0

    No fix published

Original sources

Check your server →