Deserialization of Untrusted Data

Overview topthink/think is a the new thinkphp framework. Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the Index function. Details Serialization is a process of converting an object into a sequence of bytes which can be persisted to a disk or databa...

OS Command Injection

topthink/think is vulnerable OS command injection. An attacker is able to inject malicious PHP code via /library/think/App.php...