CVE-2020-21865

ThinkPHP50-CMS v1.0 contains a remote code execution RCE vulnerability in the component /public/?s=captcha...

MyuCms code-related vulnerabilities

MyuCms is an intelligent customization system developed by ThinkPhp specifically set up for enterprises. myucms has a cross-site request forgery vulnerability that can be exploited by attackers to send unintended requests to the server...

SQL Injection in topthink/thinkphp

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

GHSA-M7H5-FJJQ-559F SQL Injection in topthink/thinkphp

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

CVE-2020-20120

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

CVE-2020-20120

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

Sql injection

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

CVE-2020-20120

CVE-2020-20120 affects ThinkPHP v3.2.3 and earlier. The vulnerability is a SQL injection that is triggered when an array is not passed to the methods where and query, allowing potentially arbitrary SQL execution. The NVD entry assigns a high base score (7.5 AV:N/AC:L/C:P/I:P/A:P) and a critical 3...

CVE-2020-20120

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

PT-2021-10431

Name of the Vulnerable Software and Affected Versions: ThinkPHP versions 3.2.3 and below Description: The issue is a SQL injection vulnerability. It occurs when the array is not passed to the where and query methods. Recommendations: For ThinkPHP versions 3.2.3 and below, update to a version abov...

CVE-2020-20120: Improper Neutralization of Special Elements used in an SQL Command

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

ThinkPHP SQL Injection Vulnerability

ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Thinking Information Technology Company. A SQL injection vulnerability exists in ThinkPHP because the product fails to properly handle user input. The vulnerability can be exploited to execute...

KiteCMS Cross-Site Request Forgery Vulnerability

KiteCMS is a content management system developed on think php. KiteCMS version 1.1 is vulnerable to cross-site request forgery. An attacker can use this vulnerability to arbitrarily add an administrator account...

Dswjcms code-related vulnerabilities

Dswjcms is for individuals and personal lending launched a free p2p open source project , based on Thinkphp architecture of the industry system , fully automated installation mode , quickly build a P2P website . Dswjcms 1.6.4 version of a security vulnerability , the vulnerability stems from...

Dswjcms Cross-Site Scripting Vulnerability

Dswjcms is for individuals and personal lending launched a free p2p open source project , based on Thinkphp architecture of the industry system , fully automated installation mode , quickly build a P2P website . Dswjcms 1.6.4 version of the existence of cross-site scripting vulnerability , the...

ThinkPHP Arbitrary PHP Execution

The vulnerability of the thinkphp/library/think/App.php component in the ThinkPHP framework is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary PHP code on the target system remotely...

WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69272)

WTCMS is a content management system CMS based on ThinkPHP. a cross-site scripting vulnerability exists in the link address field under the link module of the WTCMS backend. No details of the vulnerability are currently available...

WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69269)

WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the WTCMS page management backend. An attacker can exploit the vulnerability to obtain a cookie by entering a specially crafted payload into the search box...

WTCMS Cross-site Request Forgery Vulnerability (CNVD-2021-69267)

WTCMS is a content management system CMS based on ThinkPHP. index.php?g=admin in WTCMS...

WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69271)

WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the link fields under the menu management module of the WTCMS backend. No detailed vulnerability details are provided at this time...