CVE-2018-16385 ThinkPHP SQL Injection vulnerability
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ThinkPHP before 5.1.23 allows SQL Injection via the public/index/index/test/index query string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| topthink/framework(Packagist) | < 5.1.23 | 5.1.23 |
| topthink/framework(Packagist) | = 5.0 | No fix listed |
| topthink/framework(Packagist) | = 5.0-rc1 | No fix listed |
| topthink/framework(Packagist) | = 5.0-rc2 | No fix listed |
| topthink/framework(Packagist) | = 5.0-rc3 | No fix listed |
| topthink/framework(Packagist) | = 5.0-rc4 | No fix listed |
| topthink/framework(Packagist) | = v5.0.1 | No fix listed |
| topthink/framework(Packagist) | = v5.0.10 | No fix listed |
| topthink/framework(Packagist) | = v5.0.11 | No fix listed |
| topthink/framework(Packagist) | = v5.0.12 | No fix listed |
| topthink/framework(Packagist) | = v5.0.13 | No fix listed |
| topthink/framework(Packagist) | = v5.0.14 | No fix listed |
| topthink/framework(Packagist) | = v5.0.15 | No fix listed |
| topthink/framework(Packagist) | = v5.0.16 | No fix listed |
| topthink/framework(Packagist) | = v5.0.17 | No fix listed |
| topthink/framework(Packagist) | = v5.0.18 | No fix listed |
| topthink/framework(Packagist) | = v5.0.19 | No fix listed |
| topthink/framework(Packagist) | = v5.0.2 | No fix listed |
| topthink/framework(Packagist) | = v5.0.20 | No fix listed |
| topthink/framework(Packagist) | = v5.0.21 | No fix listed |
| topthink/framework(Packagist) | = v5.0.22 | No fix listed |
| topthink/framework(Packagist) | = v5.0.23 | No fix listed |
| topthink/framework(Packagist) | = v5.0.24 | No fix listed |
| topthink/framework(Packagist) | = v5.0.25 | No fix listed |
| topthink/framework(Packagist) | = v5.0.3 | No fix listed |
Show 34 more
| Product | Affected versions | Fixed in |
|---|---|---|
| topthink/framework(Packagist) | = v5.0.4 | No fix listed |
| topthink/framework(Packagist) | = v5.0.5 | No fix listed |
| topthink/framework(Packagist) | = v5.0.6 | No fix listed |
| topthink/framework(Packagist) | = v5.0.7 | No fix listed |
| topthink/framework(Packagist) | = v5.0.8 | No fix listed |
| topthink/framework(Packagist) | = v5.0.9 | No fix listed |
| topthink/framework(Packagist) | = v5.1-beta.1 | No fix listed |
| topthink/framework(Packagist) | = v5.1-rc.1 | No fix listed |
| topthink/framework(Packagist) | = v5.1-rc.2 | No fix listed |
| topthink/framework(Packagist) | = v5.1-rc.3 | No fix listed |
| topthink/framework(Packagist) | = v5.1.0 | No fix listed |
| topthink/framework(Packagist) | = v5.1.1 | No fix listed |
| topthink/framework(Packagist) | = v5.1.10 | No fix listed |
| topthink/framework(Packagist) | = v5.1.11 | No fix listed |
| topthink/framework(Packagist) | = v5.1.12 | No fix listed |
| topthink/framework(Packagist) | = v5.1.13 | No fix listed |
| topthink/framework(Packagist) | = v5.1.14 | No fix listed |
| topthink/framework(Packagist) | = v5.1.15 | No fix listed |
| topthink/framework(Packagist) | = v5.1.16 | No fix listed |
| topthink/framework(Packagist) | = v5.1.17 | No fix listed |
| topthink/framework(Packagist) | = v5.1.18 | No fix listed |
| topthink/framework(Packagist) | = v5.1.19 | No fix listed |
| topthink/framework(Packagist) | = v5.1.2 | No fix listed |
| topthink/framework(Packagist) | = v5.1.20 | No fix listed |
| topthink/framework(Packagist) | = v5.1.21 | No fix listed |
| topthink/framework(Packagist) | = v5.1.22 | No fix listed |
| topthink/framework(Packagist) | = v5.1.3 | No fix listed |
| topthink/framework(Packagist) | = v5.1.4 | No fix listed |
| topthink/framework(Packagist) | = v5.1.5 | No fix listed |
| topthink/framework(Packagist) | = v5.1.6 | No fix listed |
| topthink/framework(Packagist) | = v5.1.7 | No fix listed |
| topthink/framework(Packagist) | = v5.1.8 | No fix listed |
| topthink/framework(Packagist) | = v5.1.9 | No fix listed |
| thinkphp | < 5.1.23 | 5.1.23 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com exploit third-party-advisory
- exchange.xforce.ibmcloud.com third-party-advisory
- github.com product
- github.com