| Package | Affected versions | Patched versions |
|---|---|---|
| fastadmin-tp6 | = 1.0 |
In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free