critical9.8
CVE-2021-44350
ThinkPHP5 SQL Injection vulnerability
Impact
SQL Injection vulnerability exists in ThinkPHP5 5.0.x <=5.1.22 via the parseOrder function in Builder.php.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | topthink/framework | >= 5.0, <= 5.1.22 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thinkphp | Thinkphp | from 5.0.0 through 5.1.22 |