CVE Intelligence

Fastadmin vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Fastadmin products: 1 record(s), with severity, exploitation and fixes.

Fastadmin 1

Exploited only (KEV) →

CVE-2025-14966 High · 7.2 CWE-89 Dec 19, 2025
FastAdmin Backend Controller Backend.php selectpage sql injection
A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file application/common/controller/Backend.php of the component Backend Controller. Executing a manipulation of the argument custom/searchField can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.