Unrated severityNVD Advisory· Published Oct 5, 2026

CVE-2026-88424

Description

FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter(). This vulnerability allows attackers to access sensitive database information via crafted SQL statements.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xuex86438 Netizen/FineAdmin.Mvc-Pagination-Sort-Parameter-SQL-Injection-Permissions-Button-List-llm-create
Range: 1.0
Xuex86438 Netizen/FineAdminllm-create
Range: 1.0

Patches

Vulnerability mechanics

References

github.com/xuex86438-netizen/FineAdmin.Mvc-Pagination-Sort-Parameter-SQL-Injection-Permissions-Button-List-/blob/main/FineAdmin.Mvc%20Pagination%20Sort-Parameter%20SQL%20Injection%20%28/Permissions/Button/List%29nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000