CVE-2024-48229

The funadmin backend development system (version 5.0.2 ) is vulnerable to a SQL injection flaw within the Curd one click command mode plugin . The root cause is identified as improper authorization via the add method in the controller\Index.php file. An attacker can exploit this to manipulate SQL...

CVE-2024-48229: Improper Neutralization of Special Elements used in an SQL Command

funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin...