Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-20120”

CVE	Published	CVSS	ShadowTrackr CVSS	Summary
CVE: CVE-2020-20120	Published 2021-09-28	CVSS: 9.8	ShadowTrackr CVSS: 8.2	Summary: ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods.