VulertSecurity VulertSecurity

Vulnerability Database · Packagist · funadmin/funadmin · Version

funadmin/funadmin v2.6.5

v2.6.5 is affected by 25 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 8 High 10 Medium 3 Low 4 Unrated 0

All funadmin/funadmin versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

funadmin/funadmin v2.6.5 vulnerabilities

25 vulnerabilities cover funadmin/funadmin v2.6.5. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2024-48229: SQL Injection Vulnerability in funadmin 5.0.2 9.8 high No fix published 25 Oct 2024
CVE-2024-48230: SQL Injection Vulnerability in funadmin Package 9.8 high No fix published 25 Oct 2024
CVE-2024-48223: SQL Injection Vulnerability in Funadmin Package v5.0.2 9.8 high No fix published 25 Oct 2024
CVE-2024-48218: SQL Injection Vulnerability in Funadmin v5.0.2 9.8 high No fix published 25 Oct 2024
CVE-2024-48226: SQL Injection Vulnerability in Funadmin 5.0.2 9.8 high No fix published 25 Oct 2024
CVE-2024-48222: SQL Injection Vulnerability in Funadmin v5.0.2 9.8 high No fix published 25 Oct 2024
CVE-2023-24774: SQL Injection Vulnerability in Funadmin 9.8 critical No fix published 10 Mar 2023
CVE-2023-24777: SQL Injection in Funadmin 9.8 critical No fix published 09 Mar 2023
CVE-2023-24782: SQL Injection in Funadmin 9.8 critical No fix published 08 Mar 2023
CVE-2023-24773: SQL Injection in Funadmin 9.8 critical No fix published 08 Mar 2023
CVE-2023-24780: SQL Injection in Funadmin 9.8 critical No fix published 08 Mar 2023
CVE-2023-24775: SQL Injection in Funadmin 9.8 critical No fix published 07 Mar 2023
CVE-2023-24781: SQL Injection in Funadmin 9.8 critical No fix published 07 Mar 2023
CVE-2023-24776: Remote code execution in Funadmin 9.8 critical No fix published 06 Mar 2023
CVE-2024-48225: Funadmin v5.0.2 Arbitrary File Deletion Vulnerability 9.1 high No fix published 25 Oct 2024
CVE-2024-48224: Funadmin v5.0.2 SQL Injection Vulnerability 7.5 high No fix published 25 Oct 2024
CVE-2024-48227: Funadmin 5.0.2 Logic Flaw Leading to Denial of Service 7.5 high No fix published 25 Oct 2024
CVE-2026-7733: Funadmin Improper Access Control Vulnerability 7.3 medium No fix published 04 May 2026
CVE-2026-2896: funadmin Configuration Handler Incorrect Privilege Assignment Vulnerability 7.3 medium No fix published 22 Feb 2026
CVE-2024-48231: SQL Injection Vulnerability in Funadmin Package 7.2 high No fix published 21 Oct 2024
CVE-2024-48228: Funadmin 5.0.2 Cross-site Scripting Vulnerability 6.1 low No fix published 26 Oct 2024
CVE-2026-2898: funadmin Deserialization Vulnerability in Backend Endpoint 5.5 low No fix published 22 Feb 2026
CVE-2026-2894: funadmin Package Information Disclosure via getMember Function 5.3 medium No fix published 22 Feb 2026
CVE-2026-2895: funadmin Weak Password Recovery Mechanism Vulnerability 3.7 low No fix published 22 Feb 2026
CVE-2026-2897: funadmin XSS Vulnerability in Backend Interface Component 2.4 low No fix published 22 Feb 2026

Looking for another version, or everything Vulert holds for funadmin/funadmin?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About funadmin/funadmin v2.6.5

Is funadmin/funadmin v2.6.5 vulnerable?

Yes. 25 vulnerabilities in the Vulert database cover funadmin/funadmin v2.6.5: 8 critical, 10 high, 3 medium and 4 low. Each entry above names the fixed version to move to.

How do I monitor funadmin/funadmin for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the funadmin/funadmin version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.