GHSA-7xfj-4jpg-58vfCriticalCVSS 9.8

ThinkPHP SQLi Vulnerability

Published
May 14, 2022
Last Modified
July 25, 2023

🔗 CVE IDs covered (1)

CVE-2018-18530 →

📋 Description

ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate variable. NOTE: a backquote character is required in the attack URI.

🎯 Affected products1

  • composer/topthink/framework:<= 5.1.25

🔗 References (4)