EUVD-2021-2568

Malware in sbrugna...

shopcms_lang security vulnerability

shopcmslang is an open source online store system based on thinkphp5. shopcmslang A security vulnerability exists , the vulnerability stems from the existence of an insecure privilege vulnerability that allows remote attackers to elevate privileges through the coverid parameter...

GHSA-Q868-C4VW-QJX3 ThinkPHP5 SQL Injection vulnerability

SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...

ThinkPHP5 SQL Injection vulnerability

SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...

CVE-2021-44350

SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...

CVE-2021-44350

SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...

Sql injection

SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...

CVE-2021-44350

CVE-2021-44350 is a ThinkPHP5 SQL injection vulnerability affecting ThinkPHP5 5.0.x up to 5.1.22 via the parseOrder function in Builder.php. The issue is confirmed in multiple feeds (NVD entry with CVSS 7.5 / 9.8 and other references) and is described as an SQL injection vulnerability with potent...

CVE-2021-44350

SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...

CVE-2021-44350

SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...

PT-2021-24084

Name of the Vulnerable Software and Affected Versions: ThinkPHP5 versions 5.0.x through 5.1.22 Description: A SQL Injection issue exists via the parseOrder function in Builder.php. Recommendations: For versions 5.0.x through 5.1.22, consider updating to a version that contains a fix for this issu...

CVE-2021-44350: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...

Dolphin PHP has a command execution vulnerability

DolphinPHP is an open source PHP rapid development framework based on ThinkPHP5.. DolphinPHP has a command execution vulnerability, which can be exploited to gain access to the server...

File Upload Vulnerability in YunCMS

YunCMS is a CMS system based on ThinkPHP5 framework. A file upload vulnerability exists in YunCMS, which can be exploited by attackers to gain control of the server...

File upload vulnerability exists in LaySNS (CNVD-2021-44004)

LaySNS is a set of ThinkPHP5 LayUI development based on the collection of content publishing and community exchanges and one of the integrated website system. A file upload vulnerability exists in LaySNS, which can be exploited to obtain server control privileges...

Command Execution Vulnerability in HulaCWMS

HulaCWMS Hula enterprise website management system is based on ThinkPHP5 framework for the development of enterprise website management system. HulaCWMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the web server...

File Inclusion Vulnerability in HisiPHP

HisiPHP is based on ThinkPHP5 + Layui development of a set of free WEB open source framework. HisiPHP has a file inclusion vulnerability. Attackers can use the vulnerability to obtain server privileges...

Command Execution Vulnerability in HisiPHP

HisiPHP is based on ThinkPHP5 + Layui development of a set of free WEB open source framework. HisiPHP has a command execution vulnerability. Attackers can use the vulnerability to obtain server privileges...

Command execution vulnerability exists in HisiPHP (CNVD-2020-48613)

HisiPHP is based on ThinkPHP5 + Layui development of a set of free WEB open source framework. HisiPHP has a command execution vulnerability. Attackers can use the vulnerability to obtain server privileges...

Command Execution Vulnerability in Hisiphp V2.0.10

HisiPHP based on ThinkPHP5 + Layui development of a free WEB open source framework. Hisiphp V2.0.10 there is a command execution vulnerability , an attacker can exploit the vulnerability to write a configuration file , and the configuration file contains , execute commands...