Skip to content
OpenAdvisories

Package · Packagist

topthink/thinkphp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2024-48112

    ThinkPHP deserialization vulnerability

    A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.

    topthink/thinkphp Packagist
  • Critical 9.8
    CVE-2020-20120

    SQL Injection in topthink/thinkphp

    ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods.

    topthink/thinkphp Packagist