Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Funadmin

First CVE: Mar 6, 2023Active for: 3 yearsTotal CVEs: 26
45.1
VTI Score
High

Funadmin is a narrowly scoped administrative application that occupies a prominent position in vulnerability disclosures despite limited product breadth, suggesting significant deployment in environments where administrative access is critical. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and recur across a consistent attack surface: SQL injection, cross-site scripting, code injection, and deserialization of untrusted data—all application-layer input-handling and execution flaws that reflect the direct exposure of web-based administrative functionality. The concentration of critical issues in a single, widely used administrative product creates outsized risk for organizations deploying it, as a single flaw may grant direct control over managed systems. Defenders should prioritize this vendor's advisories and ensure administrative instances are isolated, patched expeditiously, and protected from untrusted network access; live exploitation activity, severity details, and exposure counts are shown alongside this summary.

FAUCET AI Generated
26
Total CVEs
More Total CVEs than 97% of tracked vendors
8.7
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 99% of tracked vendors
7.8
Avg CVSS Score
Higher Avg CVSS Score than 74% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Funadmin over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 6, 2023
3 years ago
Most Recent CVE
Feb 22, 2026
152 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (26 CVEs).

26 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-24775CRITICAL
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.
Mar 7, 20239.839NONO
CVE-2023-24774CRITICAL
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php.
Mar 10, 20239.829NONO
CVE-2023-24777CRITICAL
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.
Mar 8, 20239.829NONO
CVE-2023-24782CRITICAL
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit.
Mar 8, 20239.829NONO
CVE-2023-24773CRITICAL
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list.
Mar 8, 20239.829NONO
CVE-2023-24780CRITICAL
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns.
Mar 8, 20239.829NONO
CVE-2023-24781CRITICAL
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php.
Mar 7, 20239.829NONO
CVE-2023-24776CRITICAL
Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addon.php.
Mar 6, 20239.829NONO
CVE-2026-2894CRITICAL
A vulnerability was identified in funadmin up to 7.1.0-rc4. Affected by this vulnerability is the function getMember of the file app/frontend/view/login/forget.html. Such manipulat
Feb 21, 20269.127NONO
CVE-2026-2896HIGH
A weakness has been identified in funadmin up to 7.1.0-rc4. This affects the function setConfig of the file app/backend/controller/Ajax.php of the component Configuration Handler.
Feb 22, 20267.325NONO
View all 26 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products26 CVEs
27%
35%
38%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network26 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low25 (96.2%)
High1 (3.8%)
Unknown0 (0.0%)
User Interaction
None22 (84.6%)
Unknown0 (0.0%)
Required4 (15.4%)
Privileges Required
Low0 (0.0%)
High11 (42.3%)
None15 (57.7%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (26 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Funadmin.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Funadmin — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Funadmin's Products

View all 2 CNAs →

Top CWEs