| عنوان | ThinkPHP presence of RCE |
|---|
| الوصف | ThinkPHP is an open source lightweight PHP framework born to simplify enterprise-level application development and agile WEB application development. It was first born in early 2006, officially changed its name to ThinkPHP on New Year's Day in 2007, and was released under the Apache2 open source protocol. ThinkPHP has been adhering to the simple and practical design principles since its inception, while maintaining excellent performance and minimal code, it also pays attention to ease of use.
Version 6.1.1 has an up-to-date deserialization chain that can lead to arbitrary file writes
exp details in
https://github.com/top-think/framework/issues/2844 |
|---|
| المصدر | ⚠️ https://github.com/top-think/framework/issues/2844 |
|---|
| المستخدم | F10wers13eiCheng (UID 30725) |
|---|
| ارسال | 04/03/2023 09:16 AM (4 سنوات منذ) |
|---|
| الاعتدال | 08/03/2023 07:10 PM (4 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 220462 [ThinkPHP حتى 6.0.13/6.1.1 تجاوز الصلاحيات] |
|---|
| النقاط | 0 |
|---|