CVE-2026-88424

UNKNOWN

Description

FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter(). This vulnerability allows attackers to access sensitive database information via crafted SQL statements.

Timeline

Published:October 5th, 2026 7:17 PM

Last modified:October 5th, 2026 7:17 PM

CVSS Scoring

No CVSS v3 score available

References & Reports

Advisories, patches, and third-party reports

https://github.com/xuex86438-netizen/FineAdmin.Mvc-Pagination-Sort-Parameter-SQL-Injection-Permissions-Button-List-/blob/main/FineAdmin.Mvc%20Pagination%20Sort-Parameter%20SQL%20Injection%20%28/Permissions/Button/List%29

Source: NIST NVD · Data may lag official sources by up to one minute