CVE-2024-48230

funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php...

SQL Injection

funadmin/funadmin is vulnerable to SQL Injection. The vulnerability is due to improper handling of the selectFields parameter in the index method of \backend\controller\auth\Auth.php, which allows an attacker to manipulate database queries...