CVE-2018-18530

CRITICAL · CVSS 9.8 EPSS 1.20%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-10-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-18530

Severity

CRITICAL

CVSS

9.8

EPSS

1.20%

Original NVD Description

ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate variable. NOTE: a backquote character is required in the attack URI.