| Package | Affected versions | Patched versions |
|---|---|---|
| topthink/framework | ≤ 5.1.25 | |
| thinkphp | = 5.1.25 |
ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate variable. NOTE: a backquote character is required in the attack URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free