Fastadmin - vulnerabilities (CVEs)

13 CVEs in 1 products, 0 in the last 30 days, newest from 2026-09-29.

Products

• Fastadmin - 13 CVEs

Newest CVEs of Fastadmin

• CVE-2026-102247 - CVSS 8.5 (high), 2026-09-29: A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the…
• CVE-2026-86244 - CVSS 5.3 (medium), 2026-09-07: A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401_beta. Affected is the function register/login of the file…
• CVE-2025-14966 - CVSS 7.2 (high), 2025-12-19: A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file application/common/controller/Backend.php of…
• CVE-2024-7928 - CVSS 7.5 (high), 2024-08-19: A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality…
• CVE-2024-7453 - CVSS 5.1 (medium), 2024-08-04: A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects unknown code of the file…
• CVE-2021-43117 - CVSS 9.8 (critical), 2021-12-13: fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access.
• CVE-2020-26609 - CVSS 5.4 (medium), 2021-02-23: fastadmin V1.0.0.20200506_beta contains a cross-site scripting (XSS) vulnerability which may allow an attacker to obtain administrator credentials to log in…
• CVE-2020-25967 - CVSS 8.8 (high), 2020-12-10: The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vulnerability.
• CVE-2020-21665 - CVSS 7.2 (high), 2020-11-17: In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injection in URL…
• CVE-2019-17432 - CVSS 6.5 (medium), 2019-10-10: An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/admin/general.config/edit CSRF vulnerability, as demonstrated by resultant XSS via…
• CVE-2019-17431 - CVSS 8.8 (high), 2019-10-10: An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability.
• CVE-2019-11077 - CVSS 8.8 (high), 2019-04-11: FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI.
• CVE-2018-10268 - CVSS 5.4 (medium), 2018-04-22: An issue was discovered in FastAdmin V1.0.0.20180417_beta. There is XSS via the application\api\controller\User.php avatar parameter.