critical9.8
CVE-2020-21176
SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via…
Impact
SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thinkjs | Thinkjs | Version 3.2.10 |