CVE-2018-18530

ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate variable. NOTE: a backquote character is required in the attack URI.
Configurations

Configuration 1 (hide)

cpe:2.3:a:thinkphp:thinkphp:5.1.25:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-10-19 20:29

Updated : 2024-02-04 20:03


NVD link : CVE-2018-18530

Mitre link : CVE-2018-18530

CVE.ORG link : CVE-2018-18530


JSON object : View

Products Affected

thinkphp

  • thinkphp
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')