176 matches found
ThinkCMF X2.2.2 - Remote Code Execution
ThinkCMF X2.2.2 and below contain a remote code execution caused by processing crafted packets, letting attackers execute arbitrary code remotely, exploit requires sending malicious packets. id: CVE-2020-20601 info: name: ThinkCMF X2.2.2 - Remote Code Execution author: pikpikcu severity: critical...
ThinkCMF_getshell
ThinkCMFgetshell 框架上的任意内容包含漏洞 远程攻击者在无需任何权限情况下，通过构造特定的请求包即可在远程服务器上执行任意代码。 python usage: + python ThinkCMFgetshell.py http://x.x.x.x/ python ThinkCMFgetshell.py https://x.x.x.x/ nginx PHP/7.0.19 Shell url: https://x.x.x.x/0a30e0d61182dbb7c1eed5135787fb84.php?cmd=cat /etc/passwd...
EUVD-2026-89477
A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailController::templatePut of the file cmf-api/src/admin/controller/MailController.php of the component Email Template. The manipulation leads to improper neutralization of special...
CVE-2026-102771
A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailController::templatePut of the file cmf-api/src/admin/controller/MailController.php of the component Email Template. The manipulation leads to improper neutralization of special...
CVE-2026-102771 Naichen ThinkCMF Email Template MailController.php templatePut special elements in template engine
A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailController::templatePut of the file cmf-api/src/admin/controller/MailController.php of the component Email Template. The manipulation leads to improper neutralization of special...
CVE-2026-102771 Naichen ThinkCMF Email Template MailController.php templatePut special elements in template engine
A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailController::templatePut of the file cmf-api/src/admin/controller/MailController.php of the component Email Template. The manipulation leads to improper neutralization of special...
CVE-2026-102771
A security vulnerability exists in Naichen ThinkCMF up to version 8.0.7 within the Email Template component. The flaw resides in the MailController::templatePut function of the file cmf-api/src/admin/controller/MailController.php. The root cause is the improper neutralization of special elements ...
CVE-2018-19897
ThinkCMF X2.2.2 has SQL Injection via the function listorders in AdminbaseController.class.php and is exploitable with the manager privilege via the listorderskey1 parameter in a Link listorders action...
CVE-2018-19898
ThinkCMF X2.2.2 has SQL Injection via the method editpost in ArticleController.class.php and is exploitable by normal authenticated users via the postid1 parameter in an article editpost action...
CVE-2018-19894
ThinkCMF X2.2.2 has SQL Injection via the functions check and delete in CommentadminController.class.php and is exploitable with the manager privilege via the ids parameter in a commentadmin action...
CVE-2018-19896
ThinkCMF X2.2.2 has SQL Injection via the function delete in SlideController.class.php and is exploitable with the manager privilege via the ids parameter in a slide action...
VulnCheck KEV: CVE-2020-20601
An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet...
EUVD-2018-11569
Malware in sbrugna...
EUVD-2019-16271
Malware in sbrugna...
EUVD-2020-13386
Malware in sbrugna...
EUVD-2018-7996
Malware in sbrugna...
EUVD-2018-11570
Malware in sbrugna...
EUVD-2018-11568
Malware in sbrugna...