CVE-2020-21667

In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL…

published November 13, 2020

CVSS
—
EPSS
1%
Percentile
63.7
In the wild
Unconfirmed
What it is

In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01040 · 63.7th percentile
Published
2020-11-13T15:03Z
EPSS history
Timeline
  • 13 NOV 15:03Z
    In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL…
    cvelistv5