GHSA-vcm7-88jx-3r39

ghsaUSosv

ThinkPHP SQL Injection vulnerability

view advisory published 2022-05-14Licence: CC-BY-4.0

ThinkPHP before 5.1.23 allows SQL Injection via the `public/index/index/test/index` query string.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-16385US	critical9.8	2.15% (82nd)	—	2018-09-03
ThinkPHP before 5.1.23 allows SQL Injection via the public/index/index/test/index query string.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.