CVE-2022-47945

2022-12-2321:15:09

Google

osv.dev

thinkphp

local file inclusion

language pack

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.048 Low

EPSS

Percentile

92.8%

JSON

ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_on=true). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php.

CPENameOperatorVersion
frameworkeq6.0.11
frameworkeq6.0.1
frameworkeq5.2-beta.3
frameworkeq6.0.8
frameworkeq6.0.4
frameworkeq5.0-rc4
frameworkeq5.1-rc.2
frameworkeq5.0-rc3
frameworkeq6.0.2
frameworkeq5.1.0

Name	Operator	Version
framework	eq	6.0.11
framework	eq	6.0.1
framework	eq	5.2-beta.3
framework	eq	6.0.8
framework	eq	6.0.4
framework	eq	5.0-rc4
framework	eq	5.1-rc.2
framework	eq	5.0-rc3
framework	eq	6.0.2
framework	eq	5.1.0