CVE-2023-24777
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.
Published Updated
PatchFirst · Latest vulnerabilities
funadmin/funadmin vulnerabilities · Page 2
Vulnerabilities published for funadmin/funadmin in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 26
CVE-2023-24773
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list.
Published UpdatedCVE-2023-24781
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php.
Published UpdatedCVE-2023-24780
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns.
Published UpdatedCVE-2023-24775
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.
Published UpdatedCVE-2023-24776
Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addon.php.
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.