CVE-2024-48229

The funadmin backend development system (version 5.0.2 ) is vulnerable to a SQL injection flaw within the Curd one click command mode plugin . The root cause is improper authorization via the add method in the controller Index.php file, which allows an attacker to manipulate SQL queries to access...