Lucene search
+L

7 matches found

OSV
OSV
•added 2022/05/14 1:53 a.m.•115 views

GHSA-78Q9-24GV-G288 ThinkPHP SQLi Vulnerability

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

9.8CVSS9.9AI score0.01202EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2022/05/14 1:53 a.m.•40 views

ThinkPHP SQLi Vulnerability

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

9.8CVSS7.9AI score0.01202EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2018/10/19 8:29 p.m.•35 views

CVE-2018-18529

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

9.8CVSS9.9AI score0.01202EPSS
SaveExploits1References1
Prion
Prion
•added 2018/10/19 8:29 p.m.•29 views

Sql injection

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

7.5CVSS9.8AI score0.01202EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2018/10/19 8:29 p.m.•23 views

CVE-2018-18529

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

9.8CVSS8.5AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2018/10/19 8:00 p.m.•42 views

CVE-2018-18529

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

10AI score0.01202EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/19 12:00 a.m.•3 views

CVE-2018-18529: Improper Neutralization of Special Elements used in an SQL Command

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

9.8CVSS8.1AI score0.01202EPSS
SaveExploits1References2
Rows per page
Query Builder