CVE-2025-50707

An issue in thinkphp3 v.3.2.5 allows a remote attacker to execute arbitrary code via the index.php component. This vulnerability can be triggered through crafted template inclusion and requires no authentication. Practical consequences include full system compromise. To mitigate this risk, it is ...