Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

topthink/thinkphp

2 known vulnerabilities (1 critical), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 critical
Registry
Packagist

Advisories 2

  • CVE-2024-48112Critical 9.8

    A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary…

    Affected: from 6.1.3, through 8.0.4.

  • ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and…

    Affected: through 3.2.3.