CVE-2019-7580

ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal/admincategory/addpost.html alias parameter because the mishandling of a single quote character allows data/conf/route.php injection...

CVE-2019-7580

ThinkCMF 5.0.190111 is vulnerable to remote code execution (RCE) due to a lack of proper input validation. An attacker can execute arbitrary PHP code and OS commands by exploiting the mishandling of a single quote character within the portal/admin_category/addpost.html alias parameter . This flaw...