5.1
Medium
CVE-2025-14966 A vulnerability was determined in FastAdmin up to 1.7.0.20250506
Description
A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file application/common/controller/Backend.php of the component Backend Controller. Executing a manipulation of the argument custom/searchField can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FastAdmin | 1.7.0.20250506 | No fix stated |
Other CVEs of FastAdmin
The 5 CVEs of FastAdmin →
CVE-2026-102247
A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602
8.5
High
CVE-2026-86244
A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401_beta
5.3
Medium
CVE-2024-7928
A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121
5.3
Medium
CVE-2024-7453
A vulnerability was found in FastAdmin 1.5.0.20240328
5.1
Medium