ThinkPHP5 SQL Injection vulnerability

2021-12-1700:00:38

Google

osv.dev

8.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.5%

JSON

SQL Injection vulnerability exists in ThinkPHP5 5.0.x <=5.1.22 via the parseOrder function in Builder.php.

CPENameOperatorVersion
topthink/frameworkeq5.1.14
topthink/frameworkeq5.1.12
topthink/frameworkeq5.0.7
topthink/frameworkeq5.0.14
topthink/frameworkeq5.0.13
topthink/frameworkeq5.1.5
topthink/frameworkeq5.0.6
topthink/frameworkeq5.1.3
topthink/frameworkeq5.0.22
topthink/frameworkeq5.1.1

Name	Operator	Version
topthink/framework	eq	5.1.14
topthink/framework	eq	5.1.12
topthink/framework	eq	5.0.7
topthink/framework	eq	5.0.14
topthink/framework	eq	5.0.13
topthink/framework	eq	5.1.5
topthink/framework	eq	5.0.6
topthink/framework	eq	5.1.3
topthink/framework	eq	5.0.22
topthink/framework	eq	5.1.1