CVE-2018-19894

ThinkCMF X2.2.2 has SQL Injection via the functions check and delete in CommentadminController.class.php and is exploitable with the manager privilege via the ids parameter in a commentadmin action...

CVE-2018-19896

ThinkCMF X2.2.2 has SQL Injection via the function delete in SlideController.class.php and is exploitable with the manager privilege via the ids parameter in a slide action...

VulnCheck KEV: CVE-2020-20601

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet...

EUVD-2018-7996

Malware in sbrugna...

EUVD-2018-11570

Malware in sbrugna...

EUVD-2018-11569

Malware in sbrugna...

EUVD-2020-13386

Malware in sbrugna...

EUVD-2018-11572

Malware in sbrugna...

EUVD-2019-16271

Malware in sbrugna...

EUVD-2018-11568

Malware in sbrugna...

EUVD-2018-11571

Malware in sbrugna...

EUVD-2022-7684

Malicious code in bioql PyPI...

EUVD-2022-6158

Malicious code in bioql PyPI...

EUVD-2023-2203

Malicious code in bioql PyPI...

EUVD-2022-3097

Malicious code in bioql PyPI...

EUVD-2022-7546

Malicious code in bioql PyPI...

CVE-2024-31615

ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php...

CVE-2022-40849

ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting XSS. An attacker who successfully exploited this vulnerability could inject a Persistent XSS payload in the Slideshow Management section that execute arbitrary JavaScript code on the client side, e.g., to steal the administrator's...

CVE-2022-40489

ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery CSRF vulnerability that allows a Super Administrator user to be injected into administrative users...

CVE-2020-20601

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet...