Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2022/05/14 1:53 a.m.22 views

ThinkPHP SQLi Vulnerability

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

9.8CVSS7.9AI score0.0025EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2022/05/14 1:53 a.m.11 views

GHSA-78Q9-24GV-G288 ThinkPHP SQLi Vulnerability

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

9.8CVSS9.9AI score0.0025EPSS
Exploits1References2
OSV
OSV
added 2018/10/19 8:29 p.m.10 views

CVE-2018-18529

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

9.8CVSS8.5AI score
Exploits0References1
NVD
NVD
added 2018/10/19 8:29 p.m.11 views

CVE-2018-18529

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

9.8CVSS9.9AI score0.0025EPSS
Exploits1References1
Prion
Prion
added 2018/10/19 8:29 p.m.16 views

Sql injection

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

7.5CVSS9.8AI score0.0025EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2018/10/19 8:0 p.m.13 views

CVE-2018-18529

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

10AI score0.0025EPSS
Exploits1References1
Rows per page
Query Builder