CVE-2018-18529
CVE-2018-18529
This page contains facts from public vulnerability sources. Check the original advisory before updating.
ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI.
CVSS 9.8 · Critical · EPSS 1.2%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
topthink/framework Packagist
- Affected ranges
- ECOSYSTEM: ≤ 3.2.4
No fix published