Description
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | funadmin/funadmin | <= 5.0.2 | — | GHSA-x2fr-vj74-5h35 |
Critical · 9.8
CVE-2024-48223
EUVD-2024-3160GHSA-x2fr-vj74-5h35
SQL injection in funadmin
Published Oct 25, 2024 · Updated Oct 29, 2024 · Assigned by mitre