VYPR

Fineadmin.mvc Order By Clause SQL Injection

by Qflksheep

CVEs (1)

  • CVE-2026-67689Aug 6, 2026
    risk 0.00cvss epss

    SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code via the `field` and `order` parameters in paginated list endpoints