4 matches found
CVE-2024-48229
funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin...
9.8CVSS0.00446EPSS
SaveExploits0References4
CVE-2024-48229
The funadmin backend development system (version 5.0.2 ) is vulnerable to a SQL injection flaw within the Curd one click command mode plugin . The root cause is identified as improper authorization via the add method in the controller\Index.php file. An attacker can exploit this to manipulate SQL...
9.8CVSS8.3AI score0.00446EPSS
SaveExploits0References1Affected Software1
FunAdmin 安全漏洞
FunAdmin is FunAdmin open source a lightweight and high-color backend development system based on ThinkPHP6+Layui development. A security vulnerability exists in FunAdmin version 5.0.2, which originates from an SQL injection vulnerability in the Curd one-click command mode plugin...
9.8CVSS7.8AI score0.00446EPSS
SaveExploits0References1
20