CVE-2018-18530

2018-10-1920:29:00

Google

osv.dev

8.5 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.5%

JSON

ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate variable. NOTE: a backquote character is required in the attack URI.

CPENameOperatorVersion
frameworkeq5.1.15
frameworkeq5.0-rc4
frameworkeq5.1.22
frameworkeq5.1.23
frameworkeq5.0.0
frameworkeq5.1.4
frameworkeq5.1.17
frameworkeq5.1.12
frameworkeq5.1.9
frameworkeq5.1.21

Name	Operator	Version
framework	eq	5.1.15
framework	eq	5.0-rc4
framework	eq	5.1.22
framework	eq	5.1.23
framework	eq	5.0.0
framework	eq	5.1.4
framework	eq	5.1.17
framework	eq	5.1.12
framework	eq	5.1.9
framework	eq	5.1.21