CVE-2020-20120
CVE-2020-20120
This page contains facts from public vulnerability sources. Check the original advisory before updating.
ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods.
CVSS 9.8 · Critical · EPSS 1.8%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
topthink/thinkphp Packagist
- Versions
- 3.2.2
- 3.2.3
- Affected ranges
- ECOSYSTEM: ≤ 3.2.3
No fix published