Lucene search

K
osvGoogleOSV:GHSA-78Q9-24GV-G288
HistoryMay 14, 2022 - 1:53 a.m.

ThinkPHP SQLi Vulnerability

2022-05-1401:53:42
Google
osv.dev
5
thinkphp
sql injection
vulnerability
parsekey function
mysql.class.php

EPSS

0.002

Percentile

59.2%

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI.

EPSS

0.002

Percentile

59.2%

Related for OSV:GHSA-78Q9-24GV-G288