{"id":"CVE-2018-10225","details":"thinkphp 3.1.3 has SQL Injection via the index.php s parameter.","aliases":["GHSA-xvhr-7q4q-qjgp"],"modified":"2026-07-08T14:59:04.490754Z","published":"2018-04-19T08:29:00.737Z","references":[{"type":"ADVISORY","url":"http://www.blcat.cn/post-39.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/top-think/thinkphp","events":[{"introduced":"dad6acbf4f56891f267a3e10e9f2f0478c4837eb"},{"last_affected":"dad6acbf4f56891f267a3e10e9f2f0478c4837eb"}],"database_specific":{"cpe":"cpe:2.3:a:thinkphp:thinkphp:3.1.3:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.1.3"},{"last_affected":"3.1.3"}],"source":"CPE_STRING"}}],"versions":["3.1.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10225.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}