CVE-2022-25481

ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an intended feature of the debugging mode...

CVE-2022-25481

ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an intended feature of the debugging mode...

CVE-2011-0486: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cognos.cgi in IBM Cognos 8 Business Intelligence BI 8.4.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via the pathinfo parameter...