CVE-2024-6241

Name of the Vulnerable Software and Affected Versions: Pear Admin Boot versions up to 2.0.2

Description: A critical issue affects the function getDictItems of the file /system/dictData/getDictItems/. The manipulation with the input user(), 1, 1 leads to sql injection. The attack may be initiated remotely.

Recommendations: For Pear Admin Boot versions up to 2.0.2, consider disabling the getDictItems function until a patch is available to prevent sql injection attacks. Restrict access to the /system/dictData/getDictItems/ endpoint to minimize the risk of exploitation. Avoid using the input user() in the affected function until the issue is resolved.