6 matches found
CVE-2024-48229
funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin...
CVE-2024-48229
The funadmin backend development system (version 5.0.2 ) is vulnerable to a SQL injection flaw within the Curd one click command mode plugin . The root cause is identified as improper authorization via the add method in the controller\Index.php file. An attacker can exploit this to manipulate SQL...
FunAdmin 安全漏洞
FunAdmin is FunAdmin open source a lightweight and high-color backend development system based on ThinkPHP6+Layui development. A security vulnerability exists in FunAdmin version 5.0.2, which stems from a logic flaw in the Curd one-click command delete function that could lead to a denial of...
CVE-2024-48229: Improper Neutralization of Special Elements used in an SQL Command
funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin...