Sql injection

ThinkPHP before 5.1.23 allows SQL Injection via the public/index/index/test/index query string...