CVE-2020-21667

In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection...

CVE-2020-21667

CVE-2020-21667 affects fastadmin-tp6 v1.0, where the Ajax.php file’s table parameter is not filtered, enabling SQL injection. The vulnerability arises from unsanitized input passed to the database layer, per multiple connected records (NVD, Red Hat RH, CNVD/CVE listings, GitLab file). Exploitatio...