Description
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | funadmin/funadmin | <= 3.2.0 | — | GHSA-pvp6-53r9-8vxh |
Critical · 9.8
CVE-2023-24777
EUVD-2023-1075GHSA-pvp6-53r9-8vxh
SQL Injection in Funadmin
Published Mar 8, 2023 · Updated Mar 5, 2025 · Assigned by mitre