Description
In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injection in URL /admin/ajax/weigh.
Unscored
CVE-2020-21665
EUVD-2020-14433GHSA-vfg6-2jp3-7c54
In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injecti…
Published Nov 17, 2020 · Updated Aug 4, 2024 · Assigned by mitre