Skip to content

Vendor

thinkphp vulnerabilities

7 published CVES affecting thinkphp, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
7
Critical
6
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
1
Atom feed of thinkphp alerts

Products

Latest thinkphp CVEs

Newest publication first

  1. CVE-2019-9082 ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system...

    Published
    HighCVSS 8.8 EPSS 97.4% CISA KEV added 2021-11-03 Exploited in the wild Framework module Public exploit

    ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.

  2. CVE-2018-18546 ThinkPHP SQLi Vulnerability

    Published
    CriticalCVSS 9.8 EPSS 1.7%

    ThinkPHP 3.2.4 has SQL Injection via the order parameter because the Library/Think/Db/Driver.class.php parseOrder function mishandles the key variable.

  3. CVE-2018-18530 ThinkPHP SQLi Vulnerability

    Published
    CriticalCVSS 9.8 EPSS 1.2%

    ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate variable. NOTE: a backquote character is required in the attack URI.

  4. CVE-2018-18529 ThinkPHP SQLi Vulnerability

    Published
    CriticalCVSS 9.8 EPSS 1.2%

    ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.