Lucene search
+L

837 matches found

CNNVD
CNNVD
added 2021/10/06 12:00 a.m.9 views

MyuCms 代码问题漏洞

MyuCms is an intelligent customization system developed by ThinkPhp specifically set up for enterprises. myucms has a cross-site request forgery vulnerability that can be exploited by attackers to send unintended requests to the server...

8.1CVSS7.5AI score0.0083EPSS
SaveExploits1References2
OSV
OSV
added 2021/09/30 5:11 p.m.38 views

GHSA-M7H5-FJJQ-559F SQL Injection in topthink/thinkphp

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

9.8CVSS9.8AI score0.01807EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2021/09/30 5:11 p.m.64 views

SQL Injection in topthink/thinkphp

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

9.8CVSS9.7AI score0.01807EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2021/09/28 11:15 p.m.32 views

CVE-2020-20120

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

9.8CVSS0.01807EPSS
SaveExploits1References1
OSV
OSV
added 2021/09/28 11:15 p.m.24 views

CVE-2020-20120

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

9.8CVSS9.8AI score
SaveExploits0References1
Prion
Prion
added 2021/09/28 11:15 p.m.32 views

Sql injection

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

7.5CVSS9.7AI score0.01807EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/09/28 10:05 p.m.94 views

CVE-2020-20120

CVE-2020-20120 affects ThinkPHP v3.2.3 and earlier. The vulnerability is a SQL injection that is triggered when an array is not passed to the methods where and query, allowing potentially arbitrary SQL execution. The NVD entry assigns a high base score (7.5 AV:N/AC:L/C:P/I:P/A:P) and a critical 3...

9.8CVSS9.7AI score0.01807EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/09/28 10:05 p.m.47 views

CVE-2020-20120

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

9.8AI score0.01807EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/09/28 12:00 a.m.5 views

ThinkPHP SQL注入漏洞

ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Thinking Information Technology Company. A SQL injection vulnerability exists in ThinkPHP because the product fails to properly handle user input. The vulnerability can be exploited to execute...

9.8CVSS8.5AI score0.01807EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/09/13 12:00 a.m.8 views

KiteCMS 跨站请求伪造漏洞

KiteCMS is a content management system developed on think php. KiteCMS version 1.1 is vulnerable to cross-site request forgery. An attacker can use this vulnerability to arbitrarily add an administrator account...

8.8CVSS5.4AI score0.00554EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/09/09 12:00 a.m.7 views

Dswjcms 跨站脚本漏洞

Dswjcms is for individuals and personal lending launched a free p2p open source project , based on Thinkphp architecture of the industry system , fully automated installation mode , quickly build a P2P website . Dswjcms 1.6.4 version of the existence of cross-site scripting vulnerability , the...

6.1CVSS6.3AI score0.00641EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/09/09 12:00 a.m.14 views

Dswjcms 代码问题漏洞

Dswjcms is for individuals and personal lending launched a free p2p open source project , based on Thinkphp architecture of the industry system , fully automated installation mode , quickly build a P2P website . Dswjcms 1.6.4 version of a security vulnerability , the vulnerability stems from...

9.8CVSS9AI score0.01603EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/09/07 12:00 a.m.9 views

The vulnerability of the thinkphp/library/think/App.php component in the ThinkPHP framework allows a attacker to execute arbitrary PHP code on the target system.

The vulnerability of the thinkphp/library/think/App.php component in the ThinkPHP framework is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary PHP code on the target system remotely...

10CVSS7.8AI score0.9953EPSS
SaveExploits4References6Affected Software1
CNVD
CNVD
added 2021/09/02 12:00 a.m.46 views

WTCMS Cross-site Request Forgery Vulnerability (CNVD-2021-69267)

WTCMS is a content management system CMS based on ThinkPHP. index.php?g=admin in WTCMS...

6.5CVSS1.6AI score0.00425EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/02 12:00 a.m.39 views

WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69271)

WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the link fields under the menu management module of the WTCMS backend. No detailed vulnerability details are provided at this time...

5.4CVSS1.6AI score0.00531EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/02 12:00 a.m.35 views

WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69269)

WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the WTCMS page management backend. An attacker can exploit the vulnerability to obtain a cookie by entering a specially crafted payload into the search box...

5.4CVSS2.3AI score0.00545EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/02 12:00 a.m.36 views

WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69270)

WTCMS is a content management system CMS based on ThinkPHP. wtcms has a cross-site scripting vulnerability in the article source field under the article management module. No detailed vulnerability details are currently available...

5.4CVSS1.2AI score0.00503EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/02 12:00 a.m.50 views

WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69272)

WTCMS is a content management system CMS based on ThinkPHP. a cross-site scripting vulnerability exists in the link address field under the link module of the WTCMS backend. No details of the vulnerability are currently available...

5.4CVSS1.1AI score0.00531EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/02 12:00 a.m.42 views

WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69268)

WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the keyword search function under the backend article module of WTCMS. No detailed vulnerability details are provided at this time...

5.4CVSS1.5AI score0.00503EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/09/01 12:00 a.m.7 views

WTCMS 跨站脚本漏洞

WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the WTCMS page management backend. An attacker can exploit the vulnerability to obtain a cookie by entering a specially crafted payload into the search box...

5.4CVSS5.2AI score0.00545EPSS
SaveExploits1References4
Rows per page
Query Builder