SQL Injection in Funadmin

CRÍTICO 9.8CVE-2023-24775 · GHSA-v43v-pv95-jc55 · Published 07/03/2023 · updated 17/06/2026

Em resumo

CVE-2023-24775 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta funadmin/funadmin, funadmin (funadmin).
Chance de exploração nos próximos 30 dias (EPSS): 19.8%, maior que 97.4% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
funadmin/funadmin Packagist	`≤ 3.2.0`	No fix yet
funadmin funadmin	`= 3.2.0`	No fix yet

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.

NVD description

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≤ 3.2.0

No fix yet

= 3.2.0

No fix yet

Mais vulnerabilidades de funadmin/funadmin

Ver tudo →