CVE-2018-19897

ThinkCMF X2.2.2 has SQL Injection via the function listorders in AdminbaseController.class.php and is exploitable with the manager privilege via the listorderskey1 parameter in a Link listorders action...

PT-2018-15149

Name of the Vulnerable Software and Affected Versions ThinkCMF version X2.2.2 Description The issue concerns a SQL Injection vulnerability via the listorders function in AdminbaseController.class.php. This can be exploited with manager privilege through the listorderskey1 parameter in a "Link...