ThinkPHP 安全漏洞

Top Think Information Technology ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Think Information Technology Company. A security vulnerability exists in ThinkPHP versions 6.1.3 to 8.0.4, which stems from a deserialization vulnerability in...

Myucms cross-site request forgery vulnerability

MyuCms is a content management system based on ThinkPhp developed specifically for enterprises. myucms has a cross-site request forgery vulnerability in v2.2.1, which stems from a sql method in the product controllerindex.php file that does not correctly determine that the request originates from...

PT-2021-10653

Name of the Vulnerable Software and Affected Versions: Myucms version 2.2.1 Description: The issue is related to a server-side request forgery SSRF in the component controllerindex.php. This can be exploited via the sj method. Recommendations: For Myucms version 2.2.1, consider disabling the sj...

PT-2021-10649

Name of the Vulnerable Software and Affected Versions: Myucms version 2.2.1 Description: The issue is related to a server-side request forgery SSRF in the component controllerindex.php. This can be exploited via the sql method. Recommendations: For Myucms version 2.2.1, consider restricting acces...