← Vulnerability feed

Vulnerability record · CVE-2024-48222 · published 25 October 2024

CVE-2024-48222: Funadmin sql injection vulnerability

Funadmin · Funadmin

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.

7.2 CVSS 3.1 High EPSS 0.58% · top 54.7% CWE-89 · SQL injection

7.2CVSS 3.1 base score

0.58%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

1References, 1 tagged exploit

17 Jun 2026Last modified by NVD

Description

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Funadmin Funadmin

References

Link	Tags
https://github.com/funadmin/funadmin/issues/22	ExploitThird Party Advisory

Track CVE-2024-48222 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-36097Funadmin unrestricted file upload vulnerabilityfunadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install.EPSS 0.87%22 Jun 2023 9.8CVE-2023-24774Funadmin sql injection vulnerabilityFunadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php.EPSS 0.88%10 Mar 2023 9.8CVE-2023-24777Funadmin sql injection vulnerabilityFunadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.EPSS 0.74%8 Mar 2023 9.8CVE-2023-24782Funadmin sql injection vulnerabilityFunadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit.EPSS 0.74%8 Mar 2023 9.8CVE-2023-24773Funadmin sql injection vulnerabilityFunadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list.EPSS 0.74%8 Mar 2023 9.8CVE-2023-24780Funadmin sql injection vulnerabilityFunadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns.EPSS 0.81%8 Mar 2023 9.8CVE-2023-24775Funadmin sql injection vulnerabilityFunadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.EPSS 20%7 Mar 2023 9.8CVE-2023-24781Funadmin sql injection vulnerabilityFunadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php.EPSS 0.74%7 Mar 2023

Source: NIST National Vulnerability Database (record CVE-2024-48222), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.