Lucene search
PRIOn knowledge basePRION:CVE-2022-47945HistoryDec 23, 2022 - 9:15 p.m.
Design/Logic Flaw
2022-12-2321:15:00
PRIOn knowledge base
www.prio-n.com
10
design flaw
logic flaw
thinkphp framework
local file inclusion
language pack
remote attacker
arbitrary commands
operating system
exploitation
nvd
ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_on=true). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php.
Related
osv
osv
ThinkPHP Framework vulnerable to remote code execution
2022-12-23 21:30:17
CVE-2022-47945
2022-12-23 21:15:09
cve
cve
CVE-2022-47945
2022-12-23 21:15:09
github
github
ThinkPHP Framework vulnerable to remote code execution
2022-12-23 21:30:17
nvd
nvd
CVE-2022-47945
2022-12-23 21:15:09
veracode
veracode
Remote Code Execution (RCE)
2023-01-02 13:03:01
cvelist
cvelist
CVE-2022-47945
2022-12-23 00:00:00
nuclei
nuclei
Thinkphp Lang - Local File Inclusion
2022-12-23 07:25:38