CVE-2018-17566

CRITICAL9.8EPSS 0.25%

ThinkPHP SQL injection vulnerability

Published: 5/14/2022Modified: 4/24/2024
Also known as:GHSA-75fm-52mm-q5rm

Description

In ThinkPHP 5.1.24, the inner function delete can be used for SQL injection when its WHERE condition's value can be controlled by a user's request.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1CRITICAL9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (3)