← All advisories

Critical severityNVD Advisory· Published Mar 10, 2023· Updated Feb 28, 2025

CVE-2023-24774

CVE-2023-24774

Description

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
funadmin/funadminPackagist	<= 3.2.0	—

Affected products

2

Funadmin/Funadmincpe-rescue
ghsa-coords
pkg:composer/funadmin/funadmin
Range: <= 3.2.0

Patches

Vulnerability mechanics

References

3

github.com/advisories/GHSA-jx2x-fg9p-7gc7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-24774ghsaADVISORY
github.com/funadmin/funadmin/issues/12ghsaWEB

News mentions

0

No linked articles in our index yet.