CVE-2023-24780

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.81% chance of exploitation in the next 30 days, 56th percentile

Published

2023-03-07

Updated

2025-03-06

Proof-of-concept exploits (2)

• funadmin/funadmin/issues/6170★ · 2026-10-09
• csffs/CVE-2023-24775-and-CVE-2023-247802★ · 2023-04-03

Security advisories

• advisories/GHSA-7pmh-8qjj-4q36

References

• CVE Record
• NVD entry

Related

• CVE-2023-24773
• CVE-2023-24774
• CVE-2023-24775
• CVE-2023-24781
• CVE-2023-24782
• CVE-2024-48218