Vulnerabilities

TI-2025-13651 CVE-2025-14966 · GHSA-rfqh-qhwq-hww8

FastAdmin Backend Controller Backend.php selectpage sql injection

MEDIUM 56

A vulnerability was determined in FastAdmin up to 1.7.0.20250506.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00366 Published 2025-12-19 No fix listed CWE-74

TI-2024-07350 CVE-2024-7928 · GHSA-gp9j-wjxg-4r78

FastAdmin lang path traversal

MEDIUM 57

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.16882 Published 2024-08-19 No fix listed CWE-22

TI-2024-06907 CVE-2024-7453 · GHSA-vv6j-9mx3-5wvm

FastAdmin Attachment Management Section 4 cross site scripting

MEDIUM 56

A vulnerability was found in FastAdmin 1.5.0.20240328.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00448 Published 2024-08-04 No fix listed CWE-79

TI-2021-19163 CVE-2021-43117 · GHSA-rc7g-prg9-344f

fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access.

MEDIUM 46

fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02164 Published 2021-12-13 No fix listed CWE-434

TI-2020-16222 CVE-2020-26609 · GHSA-5q75-r4xj-cjrr

fastadmin V1.0.0.20200506_beta contains a cross-site scripting (XSS) vulnerability which…

LOW 26

fastadmin V1.0.0.20200506_beta contains a cross-site scripting (XSS) vulnerability which may allow an attacker to obtain administrator credentials to log in to the background.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00905 Published 2021-02-23 No fix listed CWE-79

TI-2020-15884 CVE-2020-25967 · GHSA-87f8-vqm8-p8wc

The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a…

MEDIUM 41

The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0129 Published 2020-12-10 No fix listed CWE-74

TI-2020-14132 CVE-2020-21665 · GHSA-vfg6-2jp3-7c54

In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a…

LOW 34

In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injection in URL /admin/ajax/weigh.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0096 Published 2020-11-17 No fix listed CWE-89

TI-2019-13017 CVE-2019-17431 · GHSA-vw27-f5gg-gq3j

An issue was discovered in fastadmin 1.0.0.20190705_beta.

LOW 39

An issue was discovered in fastadmin 1.0.0.20190705_beta.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00638 Published 2019-10-10 No fix listed CWE-352

TI-2019-13018 CVE-2019-17432 · GHSA-hr89-9hhc-9xfr

An issue was discovered in fastadmin 1.0.0.20190705_beta.

LOW 30

An issue was discovered in fastadmin 1.0.0.20190705_beta.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00546 Published 2019-10-10 No fix listed CWE-352

TI-2019-08284 CVE-2019-11077 · GHSA-5j7j-fq57-vvr8

FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability to add a new admin user via the…

LOW 39

FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00628 Published 2019-04-11 No fix listed CWE-352

TI-2018-07286 CVE-2018-10268 · GHSA-g7jc-cx72-fxjx

An issue was discovered in FastAdmin V1.0.0.20180417_beta.

LOW 25

An issue was discovered in FastAdmin V1.0.0.20180417_beta.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00526 Published 2018-04-21 No fix listed CWE-79

Vulnerabilities

Filters