ThinkPHP Arbitrary Command Execution

The vulnerability of the ThinkPHP framework is related to incorrect code generation when using the “\” delimiter in the controller name. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...