CVE-2025-14966 | FastAdmin up to 1.7.0.20250506 Backend Controller Backend.php selectpage custom/searchField sql injection

A vulnerability was found in FastAdmin up to 1.7.0.20250506 and classified as critical. Affected is the function selectpage of the file application/common/controller/Backend.php of the component Backend Controller. Executing manipulation of the argument custom/searchField can lead to sql injection.

This vulnerability is registered as CVE-2025-14966. It is possible to launch the attack remotely. Furthermore, an exploit is available.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.