| शीर्षक | Naichen (Shanghai) Information Technology Co., Ltd. ThinkCMF v8.0.1 Server-Side Template Injection |
|---|
| विवरण | A stored Server-Side Template Injection (SSTI) vulnerability exists in the backend of ThinkCMF v8.0.1. The system saves user-modified email template content to the database and later passes it directly to the Think template engine when triggering a verification email. Because the template engine allows PHP execution by default, an attacker with access to the email template settings can inject malicious PHP payloads. When the email dispatch is triggered (e.g., by requesting a verification code), the injected code is compiled and executed on the server. This results in Remote Code Execution (RCE), allowing the attacker to gain full control over the server. |
|---|
| स्रोत | ⚠️ https://github.com/coolcj-stack/ThinkCMF-v8.0.1-SSTI-Vulnerability/blob/main/ThinkCMF_Vulnerability_Report_EN.docx |
|---|
| उपयोगकर्ता | BlackSpdier (UID 89912) |
|---|
| सबमिशन | 22/08/2026 05:07 AM (1 महीना पहले) |
|---|
| संयम | 29/09/2026 06:35 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 411468 [Naichen ThinkCMF तक 8.0.7 Email Template MailController.php templatePut अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|