3 matches found
CVE-2024-48231
Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php...
7.2CVSS0.005EPSS
SaveExploits1References1
CVE-2024-48231
Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php...
8AI score0.005EPSS
SaveExploits1References1
CVE-2024-48231
Funadmin version 5.0.2 is vulnerable to SQL Injection due to the improper handling of the selectFields parameter within the index method of the ackend controller auth Auth.php file. An attacker can exploit this flaw to manipulate database queries, potentially leading to unauthorized access or da...
7.2CVSS7.6AI score0.005EPSS
SaveExploits1References1Affected Software1
20