CVE-2024-48227
MEDIUMDescription
Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service (DOS).
Is your site exposed to CVE-2024-48227?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Affected Products
| Vendor | Product |
|---|---|
| funadmin | funadmin |
References
Frequently Asked Questions
What is CVE-2024-48227? +
How severe is CVE-2024-48227? +
What products are affected by CVE-2024-48227? +
How do I check if I'm vulnerable to CVE-2024-48227? +
Related Vulnerabilities
Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield.
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.
funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin.
Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php.