critical9.8
CVE-2023-24775
SQL Injection in Funadmin
Impact
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | funadmin/funadmin | <= 3.2.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Funadmin | Funadmin | Version 3.2.0 |