151 matches found
ThinkCMF X2.2.2 - Remote Code Execution
ThinkCMF X2.2.2 and below contain a remote code execution caused by processing crafted packets, letting attackers execute arbitrary code remotely, exploit requires sending malicious packets. id: CVE-2020-20601 info: name: ThinkCMF X2.2.2 - Remote Code Execution author: pikpikcu severity: critical...
ThinkCMF_getshell
ThinkCMFgetshell 框架上的任意内容包含漏洞 远程攻击者在无需任何权限情况下，通过构造特定的请求包即可在远程服务器上执行任意代码。 python usage: + python ThinkCMFgetshell.py http://x.x.x.x/ root@kitploit: python ThinkCMFgetshell.py https://x.x.x.x/ nginx PHP/7.0.19 Shell url: https://x.x.x.x/0a30e0d61182dbb7c1eed5135787fb84.php?cmd=cat /etc/passwd...
CVE-2018-19897
ThinkCMF X2.2.2 has SQL Injection via the function listorders in AdminbaseController.class.php and is exploitable with the manager privilege via the listorderskey1 parameter in a Link listorders action...
CVE-2018-19898
ThinkCMF X2.2.2 has SQL Injection via the method editpost in ArticleController.class.php and is exploitable by normal authenticated users via the postid1 parameter in an article editpost action...
CVE-2018-19894
ThinkCMF X2.2.2 has SQL Injection via the functions check and delete in CommentadminController.class.php and is exploitable with the manager privilege via the ids parameter in a commentadmin action...
CVE-2018-19896
ThinkCMF X2.2.2 has SQL Injection via the function delete in SlideController.class.php and is exploitable with the manager privilege via the ids parameter in a slide action...
VulnCheck KEV: CVE-2020-20601
An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet...
EUVD-2020-13386
Malware in sbrugna...
EUVD-2019-16271
Malware in sbrugna...
EUVD-2018-11569
Malware in sbrugna...
EUVD-2018-7996
Malware in sbrugna...
EUVD-2018-11568
Malware in sbrugna...
EUVD-2018-11572
Malware in sbrugna...
EUVD-2018-11571
Malware in sbrugna...
EUVD-2018-11570
Malware in sbrugna...
EUVD-2022-6158
Malicious code in bioql PyPI...
EUVD-2023-2203
Malicious code in bioql PyPI...
EUVD-2022-7546
Malicious code in bioql PyPI...