CVE-2018-18530: SQL Injection
Published Oct 19, 2018
·Updated
ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate variable. NOTE: a backquote character is required in the attack URI.
Affected Software
2 affected components
composer/topthink/framework<=5.1.25
ThinkPHP ThinkPHP=5.1.25
Event History
Oct 19, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
May 14, 2022
Advisory Published
01:53 AM
Frequently Asked Questions
1
What is the severity of CVE-2018-18530?
The severity of CVE-2018-18530 is critical with a CVSS score of 9.8.
2
How does CVE-2018-18530 work?
CVE-2018-18530 allows SQL Injection by exploiting a vulnerability in the ThinkPHP library/think/db/Query.php aggregate function.
3
Which version of ThinkPHP is affected by CVE-2018-18530?
ThinkPHP version 5.1.25 is affected by CVE-2018-18530.
4
Is a backquote character required for the attack URI in CVE-2018-18530?
Yes, a backquote character is required in the attack URI for CVE-2018-18530.
5
How can I fix CVE-2018-18530?
To fix CVE-2018-18530, update to a version of ThinkPHP that is not affected by the vulnerability.