45 matches found
CVE-2023-24775: Improper Neutralization of Special Elements used in an SQL Command
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php...
PT-2023-19778
Name of the Vulnerable Software and Affected Versions Funadmin version 3.2.0 Description The issue is related to a SQL injection vulnerability. It occurs via the selectFields parameter at the MemberLevel.php file. Recommendations For Funadmin version 3.2.0, consider restricting access to the...
CVE-2023-24775
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php...
CVE-2023-24781: Improper Neutralization of Special Elements used in an SQL Command
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php...