Skip to content
BackEsc
Sign in

Funadmin · weakness class

SQL Injection

15 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

  1. Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.CVE-2023-24775Funadmin · CVSS 9.8 · 20% likely

    CWE-89

  2. Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php.CVE-2023-24774Funadmin · CVSS 9.8 · 0.9% likely

    CWE-89

  3. Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns.CVE-2023-24780Funadmin · CVSS 9.8 · 0.8% likely

    CWE-89

  4. Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php.CVE-2023-24781Funadmin · CVSS 9.8 · 0.7% likely

    CWE-89

  5. Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit.CVE-2023-24782Funadmin · CVSS 9.8 · 0.7% likely

    CWE-89

  6. Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.CVE-2023-24777Funadmin · CVSS 9.8 · 0.7% likely

    CWE-89

  7. Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list.CVE-2023-24773Funadmin · CVSS 9.8 · 0.7% likely

    CWE-89

  8. Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.CVE-2024-48222Funadmin · CVSS 9.8 · 0.6% likely

    CWE-89

  9. Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield.CVE-2024-48226Funadmin · CVSS 9.8 · 0.6% likely

    CWE-89

  10. Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.CVE-2024-48223Funadmin · CVSS 9.8 · 0.6% likely

    CWE-89

  11. Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.CVE-2024-48218Funadmin · CVSS 9.8 · 0.6% likely

    CWE-89

  12. Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php.CVE-2024-48231Funadmin · CVSS 7.2 · 0.5% likely

    CWE-89

  13. funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php.CVE-2024-48230Funadmin · CVSS 9.8 · 0.5% likely

    CWE-89

  14. funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin.CVE-2024-48229Funadmin · CVSS 9.8 · 0.4% likely

    CWE-89

  15. funadmin Frontend List Endpoint index selectList sql injectionCVE-2026-121610Funadmin · CVSS 7.3 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in