Arbitrary Code Execution (ACE)

topthink/framework is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper input handling in the routecheck function, which allows an attacker to execute arbitrary code remotely...

CVE-2025-50706

An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

CVE-2025-50706

An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

CVE-2025-50706

An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

CVE-2025-50706

The ThinkPHP Framework (v.5.1) is vulnerable to Remote Code Execution (RCE) due to improper input handling and insufficient path validation within the routecheck function. An attacker can exploit this Directory Traversal vulnerability by sending specially crafted requests—such as using "dot-dot-s...