Description
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | funadmin/funadmin | <= 3.2.0 | — | GHSA-jx2x-fg9p-7gc7 |