Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-18546
7.5
HIGHCVSS v2
Published
October 21, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ThinkPHP 3.2.4 has SQL Injection via the order parameter because the Library/Think/Db/Driver.class.php parseOrder function mishandles the key variable.
GitHub