high7.2
CVE-2024-48231
SQL injection in funadmin
Impact
Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \app\backend\controller\auth\Auth.php.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | funadmin/funadmin | <= 5.0.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Funadmin | Funadmin | Version 5.0.2 |