topthink/framework vulnerabilities (Packagist)

19 vulnerabilities.

• topthink/framework Packagist ThinkPHP Path Traversal Vulnerability CVE-2025-50706 9.8 CriticalAugust 5, 2025
• topthink/framework Packagist ThinkPHP deserialization vulnerability CVE-2024-44902 Public exploit 9.8 CriticalSeptember 9, 2024
• topthink/framework Packagist ThinkPHP Cross-Site Scripting Vulnerability CVE-2024-34467 Fix available 6.1 MediumMay 4, 2024
• topthink/framework Packagist ThinkPHP Framework vulnerable to remote code execution CVE-2022-47945 Fix available EPSS 30.2% 9.8 CriticalDecember 23, 2022
• topthink/framework Packagist Thinkphp has a code logic error CVE-2022-44289 8.8 HighDecember 6, 2022
• topthink/framework Packagist ThinkPHP deserialization vulnerability CVE-2022-38352 EPSS 21.0% 9.8 CriticalSeptember 15, 2022
• topthink/framework Packagist Deserialization of Untrusted Data in topthink/framework CVE-2022-33107 EPSS 23.9% 9.8 CriticalJune 29, 2022
• topthink/framework Packagist Deserialization of Untrusted Data CVE-2021-23592 Fix available 7.7 HighMay 6, 2022
• topthink/framework Packagist Exposure of Resource to Wrong Sphere in ThinkPHP Framework CVE-2022-25481 Disputed 7.5 HighMarch 20, 2022
• topthink/framework Packagist ThinkPHP Remote Code Execution (RCE) vulnerability CVE-2021-44892 8.8 HighFebruary 10, 2022
• topthink/framework Packagist ThinkPHP5 SQL Injection vulnerability CVE-2021-44350 9.8 CriticalDecember 15, 2021
• topthink/framework Packagist Deserialization of Untrusted Data in topthink/framework CVE-2021-36567 9.8 CriticalDecember 6, 2021
• topthink/framework Packagist Deserialization of Untrusted Data in topthink/framework CVE-2021-36564 Fix available 9.8 CriticalDecember 6, 2021
• topthink/framework Packagist ThinkPHP SQLi Vulnerability CVE-2018-18546 9.8 CriticalOctober 21, 2018
• topthink/framework Packagist ThinkPHP SQLi Vulnerability CVE-2018-18530 9.8 CriticalOctober 19, 2018
• topthink/framework Packagist ThinkPHP SQLi Vulnerability CVE-2018-18529 9.8 CriticalOctober 19, 2018
• topthink/framework Packagist ThinkPHP SQL injection vulnerability CVE-2018-17566 9.8 CriticalSeptember 26, 2018
• topthink/framework Packagist ThinkPHP SQL Injection vulnerability CVE-2018-16385 Public exploitFix available 9.8 CriticalSeptember 3, 2018
• topthink/framework Packagist thinkphp SQL Injection via the index.php s parameter CVE-2018-10225 9.8 CriticalApril 19, 2018