6.5
CVSSv2

CVE-2020-21667

Published: 13/11/2020 Updated: 01/12/2020
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

fastadmin-tp6 project fastadmin-tp6 1.0