ThinkCMF X2.2.2 - Remote Code Execution

ThinkCMF X2.2.2 and below contain a remote code execution caused by processing crafted packets, letting attackers execute arbitrary code remotely, exploit requires sending malicious packets. id: CVE-2020-20601 info: name: ThinkCMF X2.2.2 - Remote Code Execution author: pikpikcu severity: critical...

CVE-2020-20601

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet...

CVE-2020-20601

creationtimestamp| type| source ---|---|--- 2021-12-23 02:18:33+00:00| seen| https://t.me/cibsecurity/34547 2025-10-05 10:02:43+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-20601.yaml 2025-11-07 21:02:30+00:00| seen|...

CVE-2020-20601

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet...

CVE-2020-20601

ThinkCMF X2.2.2 and earlier are affected by CVE-2020-20601, a remote code execution vulnerability caused by processing crafted packets. The nuclei template specifies that unauthenticated attackers can remotely execute arbitrary PHP code on ThinkCMF servers by sending malicious packets, potentiall...