ThinkJS 3.2.10 - SQL Injection via model.increment and model.decrement step parameter
SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter.