| शीर्षक | ThinkPHP Unserializable RCE |
|---|
| विवरण | Deserialization: The process of restoring a sequence of bytes to an object, that is, the process of converting data that can be stored or transmitted into an object. Such as loading a binary data stream or file into memory and restoring it as an object. The deserialization vulnerability first appeared in 2015. Although the vulnerability is relatively new, it is very popular to exploit. The main reason is that the data submitted by the client is too trusting, which is easy to be ignored by developers. Generally, this vulnerability can execute arbitrary commands or codes, causing a greater impact.
exp detail --> githubissye
https://github.com/top-think/framework/issues/2844
|
|---|
| स्रोत | ⚠️ https://github.com/top-think/framework/issues/2844 |
|---|
| उपयोगकर्ता | F10wers13eiCheng (UID 30725) |
|---|
| सबमिशन | 24/02/2023 02:54 PM (4 साल पहले) |
|---|
| संयम | 03/03/2023 07:43 AM (7 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 220462 [ThinkPHP तक 6.0.13/6.1.1 अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|