Lucene search
Veracode Vulnerability DatabaseVERACODE:38713HistoryJan 02, 2023 - 1:03 p.m.
Remote Code Execution (RCE)
2023-01-0213:03:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
40
remote code execution
topthink/framework
vulnerability
lang parameter
remote attacker
arbitrary commands
software
0.048 Low
EPSS
Percentile
92.8%
topthink/framework is vulnerable to remote execution. The vulnerability exists because the lang parameter is not properly validated, which allows a remote attacker to inject and execute arbitrary commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| topthink/framework | le | v6.0.13 | |
| topthink/framework | le | v6.0.13 |
Related
osv
osv
ThinkPHP Framework vulnerable to remote code execution
2022-12-23 21:30:17
CVE-2022-47945
2022-12-23 21:15:09
prion
prion
Design/Logic Flaw
2022-12-23 21:15:00
github
github
ThinkPHP Framework vulnerable to remote code execution
2022-12-23 21:30:17
cve
cve
CVE-2022-47945
2022-12-23 21:15:09
nvd
nvd
CVE-2022-47945
2022-12-23 21:15:09
cvelist
cvelist
CVE-2022-47945
2022-12-23 00:00:00
nuclei
nuclei
Thinkphp Lang - Local File Inclusion
2022-12-23 07:25:38