| タイトル | ThinkPHP presence of RCE |
|---|
| 説明 | ThinkPHP is an open source lightweight PHP framework born to simplify enterprise-level application development and agile WEB application development. It was first born in early 2006, officially changed its name to ThinkPHP on New Year's Day in 2007, and was released under the Apache2 open source protocol. ThinkPHP has been adhering to the simple and practical design principles since its inception, while maintaining excellent performance and minimal code, it also pays attention to ease of use.
Version 6.1.1 has an up-to-date deserialization chain that can lead to arbitrary file writes
exp details in
https://github.com/top-think/framework/issues/2844 |
|---|
| ソース | ⚠️ https://github.com/top-think/framework/issues/2844 |
|---|
| ユーザー | F10wers13eiCheng (UID 30725) |
|---|
| 送信 | 2023年03月04日 09:16 (4 年 ago) |
|---|
| モデレーション | 2023年03月08日 19:10 (4 days later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 220462 [ThinkPHP 迄 6.0.13/6.1.1 特権昇格] |
|---|
| ポイント | 0 |
|---|