Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-24249: GitHub - z-song/laravel-admin: Build a full-featured administrative interface in ten minutes

An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file.

CVE
#vulnerability#web#google#redis#js#git#php#auth

⛵laravel-admin is administrative interface builder for laravel which can help you build CRUD backends just with few lines of code.

Documentation | 中文文档 | Demo | Demo source code | Extensions

Inspired by SleepingOwlAdmin and rapyd-laravel.

Sponsor****Requirements

  • PHP >= 7.0.0
  • Laravel >= 5.5.0
  • Fileinfo PHP Extension

Installation

This package requires PHP 7+ and Laravel 5.5, for old versions please refer to 1.4

First, install laravel 5.5, and make sure that the database connection settings are correct.

composer require encore/laravel-admin

Then run these commands to publish assets and config:

php artisan vendor:publish --provider="Encore\Admin\AdminServiceProvider"

After run command you can find config file in config/admin.php, in this file you can change the install directory,db connection or table names.

At last run following command to finish install.

php artisan admin:install

Open http://localhost/admin/ in browser,use username admin and password admin to login.

Configurations

The file config/admin.php contains an array of configurations, you can find the default configurations in there.

Right to left support

just go to this path <YOUR_PROJECT_PATH>\vendor\encore\laravel-admin\src\Traits\HasAssets.php and modify $baseCss array for loading right to left (rtl) version of bootstap and AdminLTE css files.
bootstrap.min.css change it to bootstrap.rtl.min.css
AdminLTE.min.css change it to AdminLTE.rtl.min.css

Extensions

Extension

Description

laravel-admin

helpers

Several tools to help you in development

~1.5

media-manager

Provides a web interface to manage local files

~1.5

api-tester

Help you to test the local laravel APIs

~1.5

scheduling

Scheduling task manager for laravel-admin

~1.5

redis-manager

Redis manager for laravel-admin

~1.5

backup

An admin interface for managing backups

~1.5

log-viewer

Log viewer for laravel

~1.5

config

Config manager for laravel-admin

~1.5

reporter

Provides a developer-friendly web interface to view the exception

~1.5

wangEditor

A rich text editor based on wangeditor

~1.6

summernote

A rich text editor based on summernote

~1.6

china-distpicker

一个基于distpicker的中国省市区选择器

~1.6

simplemde

A markdown editor based on simplemde

~1.6

phpinfo

Integrate the phpinfo page into laravel-admin

~1.6

php-editor
python-editor
js-editor
css-editor
clike-editor

Several programing language editor extensions based on code-mirror

~1.6

star-rating

Star Rating extension for laravel-admin

~1.6

json-editor

JSON Editor for Laravel-admin

~1.6

grid-lightbox

Turn your grid into a lightbox & gallery

~1.6

daterangepicker

Integrates daterangepicker into laravel-admin

~1.6

material-ui

Material-UI extension for laravel-admin

~1.6

sparkline

Integrates jQuery sparkline into laravel-admin

~1.6

chartjs

Use Chartjs in laravel-admin

~1.6

echarts

Use Echarts in laravel-admin

~1.6

simditor

Integrates simditor full-rich editor into laravel-admin

~1.6

cropper

A simple jQuery image cropping plugin.

~1.6

composer-viewer

A web interface of composer packages in laravel.

~1.6

data-table

Advanced table widget for laravel-admin

~1.6

watermark

Text watermark for laravel-admin

~1.6

google-authenticator

Google authenticator

~1.6

Contributors

This project exists thanks to all the people who contribute. [Contribute].

Backers

Thank you to all our backers! 🙏 [Become a backer]

Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]

Other

laravel-admin based on following plugins or services:

  • Laravel
  • AdminLTE
  • Datetimepicker
  • font-awesome
  • moment
  • Google map
  • Tencent map
  • bootstrap-fileinput
  • jquery-pjax
  • Nestable
  • toastr
  • X-editable
  • bootstrap-number-input
  • fontawesome-iconpicker
  • sweetalert2

License

laravel-admin is licensed under The MIT License (MIT).

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907