Security Advisory

CVE-2020-20120

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-09-28 22:05:09
Last updated 2024-08-04 14:15:28
Assigner mitre
State PUBLISHED

Description

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods.