CVE-2018-18529 ThinkPHP SQLi Vulnerability
CriticalCVSS 9.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| topthink/framework(Packagist) | <= 3.2.4 | No fix listed |
| thinkphp | = 3.2.4 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- www.kingkk.com exploit third-party-advisory
- github.com