CVE-2018-10225

CRITICAL9.8EPSS 0.25%

thinkphp SQL Injection via the index.php s parameter

Published: 5/14/2022Modified: 4/24/2024
Also known as:GHSA-xvhr-7q4q-qjgp

Description

thinkphp 3.1.3 has SQL Injection via the index.php s parameter.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1CRITICAL9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (3)