An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the index.php/User/read limit parameter.

Published Sep 2, 2018 · Updated Aug 5, 2024 · Assigned by mitre