CVE-2024-48231

PoC —

CVSS 3.1

7.2 high

EPSS

<1%p41

Published

Oct 21, 2024 (Oct 21, 2024)

Modified

Jun 17, 2026

Description

Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php.

Vendors: funadmin
Products: funadmin
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.