Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 28

Export CSV
CVE-2024-48229

funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Funadmin
Products
Funadmin
CVE-2024-48227

Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service (DOS).

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Funadmin
Products
Funadmin
CVE-2024-48223

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Funadmin
Products
Funadmin
CVE-2024-48222

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Funadmin
Products
Funadmin
CVE-2024-48218

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Funadmin
Products
Funadmin
CVE-2024-48226

Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Funadmin
Products
Funadmin
CVE-2024-48225

Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Funadmin
Products
Funadmin
CVE-2024-48224

Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Funadmin
Products
Funadmin