fuadmin vulnerable to insecure file upload

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-36097 · ADVISORY
• funadmin/funadmin · WEB
• funadmin/funadmin · PACKAGE

funadmin/funadmin のその他の脆弱性

• CVE-2026-7733高 7.3A flaw has been found in funadmin up to 7.1.0-rc6. This affects the function UploadService::chunkUpload of the file app/common/service/Uploa…
• CVE-2026-2898中 6.5A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloud…
• CVE-2026-2897中 4.8A security vulnerability has been detected in funadmin up to 7.1.0-rc4. This vulnerability affects unknown code of the file app/backend/view…
• CVE-2026-2896中 5.3A weakness has been identified in funadmin up to 7.1.0-rc4. This affects the function setConfig of the file app/backend/controller/Ajax.php …
• CVE-2026-2895高 8.1A security flaw has been discovered in funadmin up to 7.1.0-rc4. Affected by this issue is the function repass of the file app/frontend/cont…