919 matches found
CVE-2022-25481
ThinkPHP 5.0.24 is susceptible to information disclosure due to PATHINFO misconfiguration, allowing an attacker to access all system environment parameters from index.php. The connected template confirms an information-disclosure vulnerability; explicit exploit steps or buggy versions are not pro...
CVE-2022-25481: Exposure of Resource to Wrong Sphere
ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an intended feature of the debugging mode...
ThinkPHP security vulnerabilities
ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Thinking Information Technology Company. A security vulnerability exists in ThinkPHP Framework v5.0.24, which stems from the lack of configuration of the PATHINFO parameter. An attacker can...
CVE-2022-25481
ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an intended feature of the debugging mode...
Remote Code Execution (RCE)
topthink/thinkphp is vulnerable to remote code execution. An attacker can obtain server control privileges by injecting a malicious code through the filename function in class.php...
ThinkPHP Remote Code Execution (RCE) vulnerability
A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...
GHSA-75JP-87W2-C6X2 ThinkPHP Remote Code Execution (RCE) vulnerability
A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...
CVE-2021-44892
A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...
CVE-2021-44892
A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...
CVE-2021-44892
A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...
Remote code execution
A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...
CVE-2021-44892
A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...
CVE-2021-44892
ThinkPHP 3.x.x is affected by CVE-2021-44892 due to a vulnerability in value[_filename] processed by index.php, enabling a remote attacker to gain server control privileges. Affected component: ThinkPHP 3.x.x (via index.php). Root cause: improper handling of the filename parameter leading to RCE....
ThinkPHP security vulnerabilities
ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Thinking Information Technology Company. A security vulnerability exists in ThinkPHP, which stems from a Remote Code Execution RCE vulnerability in ThinkPHP 3.x. An attacker can exploit this...
PT-2022-12253
Name of the Vulnerable Software and Affected Versions ThinkPHP versions 3.x.x Description A Remote Code Execution RCE issue exists via the value filename in index.php, allowing a malicious user to obtain server control privileges. Recommendations For ThinkPHP versions 3.x.x, update to a version...
CVE-2021-44892: Undefined Security Weakness
A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...
EyouCms security vulnerability
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms, which originates from eyouCMS V1.5.5-UTF8-SP31 Deletion of arbitrary files due to insufficient parameter...
Simple Online Mens Simple Online Mens Salon Management System SQL Injection Vulnerability
Simple Online Mens Salon Management System is a simple login and registration system based on Vue-Cli and Thinkphp.Simple Online Mens Salon Management System is vulnerable to SQL injection, which can be exploited by attackers to retrieve all authentication and information about the users of this...
ThinkCMF Injection Vulnerability
ThinkCMF is a CMS Content Management System based on ThinkPHP. thinkCMF version X2.2.2 has a security vulnerability that can be exploited by attackers to execute arbitrary code via a crafted package...
Simple Online Mens Salon Management System – SQL Injection Vulnerability
Simple Online Mens Salon Management System is a simple login and registration system based on Vue-Cli and Thinkphp.Simple Online Mens Salon Management System is vulnerable to SQL injection, which can be exploited by attackers to retrieve all authentication and information about the users of this...