Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php.
References:GSA_kwCzR0hTQS1qeDJ4LWZnOXAtN2djN84AAyBw
Funadmin vulnerable to SQL injection
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| packagist:funadmin/funadmin | <= 3.2.0 | No known fixed version | |
Affected Version RangesAll affected versions1.5.0, 2.1.0, 2.2.6, 2.2.9, 2.2.10, 2.2.11, 2.2.12, 2.2.13, 2.2.14, 2.3.1, 2.4.0, 2.4.1, 2.4.2, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 3.0.1, 3.1.0, 3.1.1, 3.2.0 |
|||