EUVD-2021-30604

Malicious code in bioql PyPI...

EUVD-2023-0726

Malicious code in bioql PyPI...

GreenCMS security vulnerabilities

GreenCMS is an open source content management system CMS developed by GreenCMS based on ThinkPHP. A security vulnerability exists in GreenCMS 2.3.0603 and earlier versions, which stems from the incorrect operation of the parameter upload in the file/index.php?m=admin&c=media&a=fileconnect,...

ThinkPHP Routecheck Code Execution

The vulnerability of the routecheck function in the ThinkPHP framework is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted commands...

CVE-2025-50706

An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

ThinkPHP Path Traversal Vulnerability

An issue in ThinkPHP Framework v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

GHSA-MRWC-MVR8-9XQ5 ThinkPHP Path Traversal Vulnerability

An issue in ThinkPHP Framework v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

CVE-2025-50707

An issue in thinkphp3 v.3.2.5 allows a remote attacker to execute arbitrary code via the index.php component...

CVE-2025-50706

An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

CVE-2025-50706

The ThinkPHP Framework (v.5.1) is vulnerable to Remote Code Execution (RCE) due to improper input handling and insufficient path validation within the routecheck function. An attacker can exploit this Directory Traversal vulnerability by sending specially crafted requests—such as using "dot-dot-s...

CVE-2025-50706

An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

CVE-2025-50706

An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

ThinkPHP security vulnerabilities

ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Thinking Information Technology ThinkPHP. A security vulnerability exists in thinkphp version v.5.1, which stems from a routecheck function that allows execution of arbitrary code...

CVE-2025-50707

An issue in thinkphp3 v.3.2.5 allows a remote attacker to execute arbitrary code via the index.php component...

ThinkPHP security vulnerabilities

ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Thinking Information Technology ThinkPHP. A security vulnerability exists in ThinkPHP version v.3.2.5, which originates from the index.php component that allows execution of arbitrary code...

CVE-2025-50707

An issue in thinkphp3 v.3.2.5 allows a remote attacker to execute arbitrary code via the index.php component...

CVE-2025-50706: Improper Control of Generation of Code

An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

CVE-2025-50706

An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

CVE-2025-50706

An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

PT-2025-31940 · Thinkphp3 · Thinkphp3

Name of the Vulnerable Software and Affected Versions: thinkphp3 version 3.2.5 Description: An issue in thinkphp3 allows a remote attacker to execute arbitrary code via the index.php component. This can be achieved through crafted template inclusion, requiring no login. Recommendations: Block...