CVE-2018-18530

ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate variable. NOTE: a backquote character is required in the attack URI...

CVE-2019-18530

...

CVE-2019-18530

CVE-2019-18530 is rejected; this entry does not represent an active vulnerability.

CVE-2017-18530

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...

CVE-2017-18530

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...

CVE-2017-18530

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...

CVE-2017-18530

CVE-2017-18530 covers the WordPress rating-bws plugin prior to version 0.2, which contains multiple cross-site scripting (XSS) flaws. The core issue is insufficient validation of client-side data, enabling an attacker to execute arbitrary JavaScript in victims’ browsers (potentially stealing sess...

CVE-2018-18530

ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate variable. NOTE: a backquote character is required in the attack URI...

CVE-2018-18530

ThinkPHP 5.1.25 contains a SQL Injection via the count parameter caused by mishandling of the aggregate variable in library/think/db/Query.php. The flaw enables injection with a backquote character in the attack URI. Affected product: ThinkPHP (PHP framework); root cause: aggregate handling in Qu...