What is GHSA-r247-mpv9-8ww6?

GHSA-r247-mpv9-8ww6 is a security advisory published by GitHub Security Advisories with Critical severity. SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code...

Which CVE IDs does GHSA-r247-mpv9-8ww6 cover?

GHSA-r247-mpv9-8ww6 covers the following CVE IDs: CVE-2026-67689. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r247-mpv9-8ww6?

GHSA-r247-mpv9-8ww6 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-r247-mpv9-8ww6CriticalCVSS 9.8

SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code...

Vendor

GitHub Security Advisories

Published

August 7, 2026

Last Modified

August 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-67689 →

📋 Description

SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code via the field and order parameters in paginated list endpoints

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-67689
https://github.com/qflksheep/CVE-2026-67689-FineAdmin.Mvc-vulnerability/blob/main/CVE-2026-67689-ORDER%20BY%20Clause%20SQL%20Injection
https://github.com/qflksheep/FineAdmin.Mvc-ORDER-BY-Clause-SQL-Injection/blob/main/README.md
https://github.com/advisories/GHSA-r247-mpv9-8ww6