CVE-2021-40616

thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required...

CVE-2021-40616

thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required...

CVE-2021-40616

thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required...

CVE-2021-40616

thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required...

CVE-2021-40616

CVE-2021-40616 affects ThinkCMF v5.1.7. A vulnerability in the back-end user management group permissions allows an attacker to modify the administrator (id=1) password when the background user management group authority is required. This is classified as an Incorrect Authorization issue affectin...

ThinkCMF 安全漏洞

ThinkCMF is a CMS Content Management System based on ThinkPHP. A security vulnerability exists in ThinkCMF v5.1.7, which can be exploited by an attacker to modify the password of an administrator account with id 1 via the back-end user management group privileges...

CVE-2021-40616: Direct Request

thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required...

PT-2022-11280 · Thinkcmf · Thinkcmf

Name of the Vulnerable Software and Affected Versions: thinkcmf version 5.1.7 Description: The issue allows an attacker to modify the password of the administrator account with id 1 through the background user management group permissions. This is possible when the background user management grou...

GHSA-842M-VP3R-QWWR ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability in ThinkCMF, which can add an admin account...

ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability in ThinkCMF, which can add an admin account...

ThinkCMF Injection Vulnerability

ThinkCMF is a CMS Content Management System based on ThinkPHP. thinkCMF version X2.2.2 has a security vulnerability that can be exploited by attackers to execute arbitrary code via a crafted package...

CVE-2020-20601

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet...

CVE-2020-20601

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet...

Code injection

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet...

CVE-2020-20601

ThinkCMF X2.2.2 and earlier are affected by CVE-2020-20601, a remote code execution vulnerability caused by processing crafted packets. The nuclei template specifies that unauthenticated attackers can remotely execute arbitrary PHP code on ThinkCMF servers by sending malicious packets, potentiall...

CVE-2020-20601

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet...

ThinkCMF 代码注入漏洞

ThinkCMF is a CMS Content Management System based on ThinkPHP. thinkCMF version X2.2.2 has a security vulnerability that can be exploited by attackers to execute arbitrary code via a crafted package...

CVE-2020-20601: Improper Control of Generation of Code

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet...

PT-2021-10516

Name of the Vulnerable Software and Affected Versions: ThinkCMF versions X2.2.2 and below Description: An issue in ThinkCMF allows attackers to execute arbitrary code via a crafted packet. Recommendations: For ThinkCMF versions X2.2.2 and below, at the moment, there is no information about a newe...

ThinkCMF Cross-site Request Forgery Vulnerability

ThinkCMF is a CMS Content Management System based on ThinkPHP. thinkCMF v5.1.0 is vulnerable to cross-site request forgery, which allows attackers to add administrator accounts. No details of the vulnerability are currently available...