{"vulnerability": "CVE-2023-2477", "sightings": [{"uuid": "3c0828fe-8b80-46a2-9d8e-e3ac78ae61ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24774", "type": "seen", "source": "Telegram/ox3Tp7VTIeU_n5J6i0QmGKWrTbFwd68GcC0r09zDDAf-0P9q", "content": "", "creation_timestamp": "2025-03-02T11:45:37.000000Z"}, {"uuid": "00ac0a55-1288-4859-9911-c1e9d3054d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24775", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4097", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1amy python poc CVE-2023-24774 and CVE-2023-24775 this sqli cve funadmin\nURL\uff1ahttps://github.com/csffs/CVE-2023-24775-and-CVE-2023-24780\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-04-03T09:24:42.000000Z"}, {"uuid": "bc4c0402-0eeb-46e3-a081-42dd47088c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24774", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4097", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1amy python poc CVE-2023-24774 and CVE-2023-24775 this sqli cve funadmin\nURL\uff1ahttps://github.com/csffs/CVE-2023-24775-and-CVE-2023-24780\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-04-03T09:24:42.000000Z"}, {"uuid": "8957a480-d5a7-4c6a-9910-123b1bc2be3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24775", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4096", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1amy python poc CVE-2023-24774 and CVE-2023-24775 this sqli cve funadmin\nURL\uff1ahttps://github.com/csffs/CVE-2023-24775-and-CVE-2023-24774\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-04-03T09:18:27.000000Z"}, {"uuid": "66cd0605-e03d-4fb5-ba59-5ef7113df6aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24774", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4096", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1amy python poc CVE-2023-24774 and CVE-2023-24775 this sqli cve funadmin\nURL\uff1ahttps://github.com/csffs/CVE-2023-24775-and-CVE-2023-24774\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-04-03T09:18:27.000000Z"}, {"uuid": "9c05b70d-fd5e-46ea-ab57-6aeb0a7f6753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24777", "type": "seen", "source": "Telegram/NoKTqEgq9HS1ex5O39w2K_AXExJFvyz9wUQsjAURzti86Vfj", "content": "", "creation_timestamp": "2025-03-06T02:17:22.000000Z"}, {"uuid": "e737bfb0-9d26-4f37-84f3-0df2b912a7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24773", "type": "seen", "source": "Telegram/rEzlTJSI075wY2QIIhPOSK4QrJxLekL8EaUy4sopiQIcwDA0", "content": "", "creation_timestamp": "2025-03-06T02:16:33.000000Z"}, {"uuid": "7de4aeed-65cf-41b1-91af-494cadee039b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24775", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6555", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-24775\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \\member\\Member.php.\n\ud83d\udccf Published: 2023-03-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T14:54:48.704Z\n\ud83d\udd17 References:\n1. https://github.com/funadmin/funadmin/issues/9", "creation_timestamp": "2025-03-05T15:33:03.000000Z"}, {"uuid": "326127d1-2649-4f9c-8310-1265b7bc526c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24775", "type": "seen", "source": "Telegram/_uGXxxbsE4vHiSoJ0RQ33a1cSEZDjfh4795MgshUqG-KudQx", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "844440f5-dc96-44be-965b-dde89e0757cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24776", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6682", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-24776\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \\controller\\Addon.php.\n\ud83d\udccf Published: 2023-03-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-06T15:25:32.188Z\n\ud83d\udd17 References:\n1. https://github.com/funadmin/funadmin/issues/7", "creation_timestamp": "2025-03-06T16:06:58.000000Z"}, {"uuid": "0ddcebc7-f7e4-47fb-ab4d-fc5040e53bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24774", "type": "seen", "source": "Telegram/jatIZkaUHUq5Y1tQNc6woeEuj37YV0jCdCojycZ93KkM4w", "content": "", "creation_timestamp": "2025-09-20T04:35:31.000000Z"}, {"uuid": "587b109f-b1a0-48c0-bc79-13086fb37e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24775", "type": "seen", "source": "Telegram/jatIZkaUHUq5Y1tQNc6woeEuj37YV0jCdCojycZ93KkM4w", "content": "", "creation_timestamp": "2025-09-20T04:35:31.000000Z"}, {"uuid": "8d759c13-fb8e-4d4e-852b-db8971081db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24777", "type": "seen", "source": "https://t.me/cibsecurity/59707", "content": "\u203c CVE-2023-24777 \u203c\n\nFunadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-09T00:23:22.000000Z"}, {"uuid": "b22997cf-7ccc-429d-9054-366ddb1eb24b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2477", "type": "seen", "source": "https://t.me/cibsecurity/63161", "content": "\u203c CVE-2023-2477 \u203c\n\nA vulnerability was found in Funadmin up to 3.2.3. It has been declared as problematic. Affected by this vulnerability is the function tagLoad of the file Cx.php. The manipulation of the argument file leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227869 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-02T18:30:10.000000Z"}, {"uuid": "54a266fb-8d6c-4187-a66c-c6bab38e8bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24773", "type": "seen", "source": "https://t.me/cibsecurity/59673", "content": "\u203c CVE-2023-24773 \u203c\n\nFunadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-08T19:23:05.000000Z"}, {"uuid": "9fc93168-2b83-4126-a1b7-3c79248e9567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24774", "type": "seen", "source": "https://t.me/cibsecurity/59785", "content": "\u203c CVE-2023-24774 \u203c\n\nFunadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \\controller\\auth\\Auth.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-10T16:20:56.000000Z"}, {"uuid": "1023f309-5b35-4f9a-8750-8620d6c79d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24775", "type": "seen", "source": "https://t.me/cibsecurity/59607", "content": "\u203c CVE-2023-24775 \u203c\n\nFunadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \\member\\Member.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-07T20:23:51.000000Z"}, {"uuid": "60f258ce-7060-473f-a4ad-8ac6557c5df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24776", "type": "seen", "source": "https://t.me/cibsecurity/59500", "content": "\u203c CVE-2023-24776 \u203c\n\nFunadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \\controller\\Addon.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-06T22:12:59.000000Z"}]}