883 matches found
2024: Old CVEs, New Targets — Active Exploitation of ThinkPHP
...
RedTail Crypto-Mining Malware Exploiting Palo Alto Networks Firewall Vulnerability
The threat actors behind the RedTail cryptocurrency mining malware have added a recently disclosed security flaw impacting Palo Alto Networks firewalls to its exploit arsenal. The addition of the PAN-OS vulnerability to its toolkit has been complemented by updates to the malware, which now...
GHSA-969F-V7JV-PGJ3 ThinkPHP Cross-Site Scripting Vulnerability
ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in thinkexception.tpl...
ThinkPHP Cross-Site Scripting Vulnerability
ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in thinkexception.tpl...
CVE-2024-34467
ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in thinkexception.tpl...
CVE-2024-34467: Improper Neutralization of Input During Web Page Generation
ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in thinkexception.tpl...
CVE-2024-34467
The ThinkPHP 8.0.3 framework is vulnerable to Cross-Site Scripting (XSS) because of inadequate filtering of function argument values within the think_exception.tpl file. Additionally, the same file can lead to Sensitive Information Disclosure , where remote attackers can discover the PHPSESSION c...
CVE-2024-34467
ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in thinkexception.tpl...
CVE-2024-34467
ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in thinkexception.tpl...
CVE-2024-34467
ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in thinkexception.tpl...
ThinkPHP 安全漏洞
Top Think Information Technology ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Think Information Technology. A security vulnerability exists in ThinkPHP version 8.0.3, which originated from allowing remote attackers to discover the...
PT-2024-25919
Name of the Vulnerable Software and Affected Versions: ThinkPHP version 8.0.3 Description: The issue allows remote attackers to exploit XSS due to inadequate filtering of function argument values in think exception.tpl. Additionally, it enables remote attackers to discover the PHPSESSION cookie...
PT-2025-31939 · Thinkphp · Thinkphp
Name of the Vulnerable Software and Affected Versions: thinkphp version 5.1 Description: An issue in thinkphp version 5.1 allows a remote attacker to execute arbitrary code via the routecheck function. This flaw enables remote, unauthenticated users to include files and run code. Recommendations:...
VulnCheck KEV: CVE-2022-47945
ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled langswitchon=true. An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php...
EyouCMS Deserialization Vulnerability
EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP. EyouCMS version 1.6.5 has a deserialization vulnerability, the vulnerability stems from the unsafe deserialization of the parameter channelid of the file /login.php in the receipt of user-submitted serialized data...
EyouCMS 代码问题漏洞
EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP. EyouCMS version 1.6.5 has a deserialization vulnerability, the vulnerability stems from the unsafe deserialization of the parameter channelid of the file /login.php in the receipt of user-submitted serialized data...
EyouCms Security Vulnerability
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms v1.6.4, which stems from the existence of a PHP file inclusion vulnerability...
EyouCms Cross-Site Scripting Vulnerability
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A cross-site scripting vulnerability exists in EyouCms v.1.6.5, which stems from a cross-site scripting vulnerability in the numr parameter that allows...
GreenCMS Cross-Site Scripting Vulnerability
GreenCMS is a content management system CMS developed on ThinkPHP. A cross-site scripting vulnerability exists in GreenCMS v2.3, which originated from a vulnerability that allows attackers to execute arbitrary web script or HTML via a specially crafted payload...
