Search results

sys. attach # mime has a reflection XSS vulnerability

Status: Open.

#31 In funadmin/funadmin;

· LvZCh opened on Sep 18, 2024

auth.Auth#parentField has sql injection vulnerability

Status: Open.

#30 In funadmin/funadmin;

· LvZCh opened on Sep 17, 2024

auth.Auth#selectFields[value] has sql injection vulnerability

Status: Open.

#29 In funadmin/funadmin;

· LvZCh opened on Sep 17, 2024

There is an SQL injection in the Curd one click command mode plugin

Status: Open.

#28 In funadmin/funadmin;

· LvZCh opened on Sep 17, 2024

The Curd one click command has a logical flaw in the deletion function.

Status: Open.

#27 In funadmin/funadmin;

· LvZCh opened on Sep 16, 2024

There is an SQL injection in the Curd one click command mode plugin

Status: Open.

#26 In funadmin/funadmin;

· LvZCh opened on Sep 16, 2024

Funadmin v5.0.2 has an arbitrary file deleted in the/curd/index/delfile path

Status: Open.

#25 In funadmin/funadmin;

· LvZCh opened on Sep 16, 2024

Funadmin v5.0.2 has an arbitrary file read in the/curd/index/editfile path

Status: Open.

#24 In funadmin/funadmin;

· LvZCh opened on Sep 16, 2024

Funadmin v5.0.2 has 1 SQL injection in the/curd/table/fieldlist path

Status: Open.

#23 In funadmin/funadmin;

· LvZCh opened on Sep 15, 2024

Funadmin v5.0.2 has 1 SQL injection in the/curd/table/edit path

Status: Open.

#22 In funadmin/funadmin;

· LvZCh opened on Sep 15, 2024

Funadmin v5.0.2 has 1 SQL injection in the/curd/table/list path

Status: Open.

#21 In funadmin/funadmin;

· LvZCh opened on Sep 15, 2024

A Arbitrary File Read Vulnerability exists in funadmin3.3.3

Status: Open.

#20 In funadmin/funadmin;

· scofield1920 opened on May 14, 2024