ThinkPHP SQLi Vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-18546 · ADVISORY
• top-think/framework · WEB
• top-think/thinkphp commit 9748cb8 · WEB
• 98587329.github.io/2018/10/09/thinkphp%E6%B3%A8%E5%85%A5%E5%88%86%E6%9E%90 · WEB
• 98587329.github.io/2018/10/09/thinkphp%E6%B3%A8%E5%85%A5%E5%88%86%E6%9E%90 · Exploit

Weitere Schwachstellen in topthink/framework

• CVE-2025-50706KRITISCH 9.8An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function
• CVE-2024-44902KRITISCH 9.8A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.
• CVE-2024-34467MITTEL 6.1ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in think_exception.tpl.
• CVE-2022-47945KRITISCH 9.8ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_o…
• CVE-2022-44289HOCH 8.8Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell.