Description
SQL Injection vulnerability exists in ThinkPHP5 5.0.x <=5.1.22 via the parseOrder function in Builder.php.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | topthink/framework | >= 5.0, <= 5.1.22 | — | GHSA-q868-c4vw-qjx3 |
Critical · 9.8
CVE-2021-44350
EUVD-2021-2568GHSA-q868-c4vw-qjx3
ThinkPHP5 SQL Injection vulnerability
Published Dec 15, 2021 · Updated Aug 4, 2024 · Assigned by mitre