SQL Injection

funadmin/funadmin is vulnerable to SQL Injection. The vulnerability is due to improper validation of the parentField parameter in the index method of \backend\controller\auth\Auth.php...