CVE-2020-21667: Fastadmin-TP6 Project Fastadmin-TP6

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection.

Affected products

• Fastadmin-TP6 Project Fastadmin-TP6: version 1.0 only

Published 2020-11-13. Last modified 2026-06-17.