Vulnerabilities > Fastadmin > High

DATE CVE VULNERABILITY TITLE RISK
2024-08-19 CVE-2024-7928 Path Traversal vulnerability in Fastadmin
A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121.
network
low complexity
fastadmin CWE-22
7.5
2020-12-10 CVE-2020-25967 Injection vulnerability in Fastadmin 1.0.0.20200506
The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vulnerability.
network
low complexity
fastadmin CWE-74
8.8
2020-11-17 CVE-2020-21665 SQL Injection vulnerability in Fastadmin 1.0.0.20191212
In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injection in URL /admin/ajax/weigh.
network
low complexity
fastadmin CWE-89
7.2
2019-10-10 CVE-2019-17431 Cross-Site Request Forgery (CSRF) vulnerability in Fastadmin 1.0.0.20190705
An issue was discovered in fastadmin 1.0.0.20190705_beta.
network
low complexity
fastadmin CWE-352
8.8
2019-04-11 CVE-2019-11077 Cross-Site Request Forgery (CSRF) vulnerability in Fastadmin 1.0.0.20190111
FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI.
network
low complexity
fastadmin CWE-352
8.8