EyouCMS security vulnerabilities

EyouCMS is an open source content management system CMS based on ThinkPHP by China Eyou Eyou. A security vulnerability exists in EyouCMS 1.7.7 and earlier versions, which stems from a misuse of the function saveRemote in the file application/function.php, which could lead to server-side request...

EyouCMS SQL Injection Vulnerability

EyouCMS is an open source content management system CMS based on ThinkPHP by China Eyou Eyou. EyouCMS 1.7.6 and previous versions exist SQL injection vulnerability, the vulnerability stems from the wrong operation of the parameter content in the file /application/admin/logic/FilemanagerLogic.php,...

FastAdmin SQL injection vulnerability

FastAdmin is a set of web backend development framework based on ThinkPHP and Bootstrap by Karson's personal developer. FastAdmin 1.7.0.20250506 and earlier versions exist SQL injection vulnerability, the vulnerability stems from the application/common/controller/Backend.php file...

Exploit for Deserialization of Untrusted Data in Thinkphp

CVE-2024-44902 - ThinkPHP Insecure Deserialization RCE Vulner...

VulnCheck KEV: CVE-2024-44902

A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code...

WTCMS SQL injection vulnerability

wtcms is a ThinkPHP-based content management system CMS by Taosir Individual Developer. An SQL injection vulnerability exists in wtcms, which stems from incorrect manipulation of the parameter ids in the file application/Comment/Controller/CommentadminController.class.php, which could lead to SQL...

CVE-2025-63888

The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability...

CVE-2025-63889

The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file path in a template value...

CVE-2025-63889

The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file path in a template value...

CVE-2025-63888

The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability...

CVE-2025-63888

The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability...

CVE-2025-63888

The ThinkPHP 5.0.24 framework is affected by a Remote Code Execution (RCE) vulnerability located in the read() function of the thinkphp herapy hink emplateranch ile.php file. This vulnerability allows an attacker to execute arbitrary code by manipulating the template path via the view() function...

CVE-2025-63889

The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file path in a template value...

CVE-2025-63888

The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability...

ThinkPHP security vulnerabilities

ThinkPHP is a PHP-based, open source, lightweight web application development framework from China Top Think Information Technology ThinkPHP. A security vulnerability exists in ThinkPHP version 5.0.24, which stems from a fetch function in the file thinkphplibrary hinkTemplate.php that allows an...

CVE-2025-63889

The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file path in a template value...

CVE-2025-63888

The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability...

PT-2025-47611

Name of the Vulnerable Software and Affected Versions ThinkPHP version 5.0.24 Description The read function within the thinkphplibrarythinktemplatedriverFile.php file in ThinkPHP 5.0.24 has a remote code execution issue. The function allows for the execution of arbitrary code. Recommendations At...

CVE-2025-63889

The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file path in a template value...

ThinkPHP security vulnerabilities

ThinkPHP is a PHP-based, open-source, lightweight web application development framework from China Top Thinking Information Technology ThinkPHP. A security vulnerability exists in ThinkPHP version 5.0.24, which originates from a remote code execution vulnerability in the read function in the file...