CVE-2020-21665: SQL Injection
Published Nov 17, 2020
·Updated
In fastadmin V1.0.0.20191212beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injection in URL /admin/ajax/weigh.
Affected Software
1 affected component
fastadmin FastAdmin=1.0.0.20191212-beta
Remediation
Event History
Nov 17, 2020
CVE Published
via MITRE·02:58 PM
Data Sourced
via MITRE·02:58 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-21665?
CVE-2020-21665 is considered a high severity vulnerability due to its potential for SQL injection exploitation.
2
How can I fix CVE-2020-21665?
To fix CVE-2020-21665, update Fastadmin to the latest version that addresses this SQL injection issue.
3
What kind of attacks can CVE-2020-21665 facilitate?
CVE-2020-21665 can facilitate SQL injection attacks, allowing an attacker to execute arbitrary SQL commands within the database.
4
Who is affected by CVE-2020-21665?
Users of Fastadmin version 1.0.0.20191212-beta who have administrator rights are affected by CVE-2020-21665.
5
How does CVE-2020-21665 compromise application security?
CVE-2020-21665 compromises application security by allowing attackers to manipulate SQL queries through crafted URLs.