Severity: Critical
CVSS Score: 9.8
ThinkPHP before 5.1.23 allows SQL Injection via the public/index/index/test/index query string.