SQL injection in funadmin

Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile...

CVE-2024-48225

Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile...

CVE-2024-48225

Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile...

CVE-2024-48225: Undefined Security Weakness

Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile...

CVE-2024-48225

Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile...

CVE-2024-48225

The funadmin/funadmin framework, specifically version 5.0.2 , is vulnerable to SQL Injection and Arbitrary File Deletion . The root cause is a lack of proper access control and insecure handling within the delfile method located in controller\Index.php (accessible via the /curd/index/delfile endp...