| 제목 | ThinkPHP presence of RCE |
|---|
| 설명 | ThinkPHP is an open source lightweight PHP framework born to simplify enterprise-level application development and agile WEB application development. It was first born in early 2006, officially changed its name to ThinkPHP on New Year's Day in 2007, and was released under the Apache2 open source protocol. ThinkPHP has been adhering to the simple and practical design principles since its inception, while maintaining excellent performance and minimal code, it also pays attention to ease of use.
Version 6.1.1 has an up-to-date deserialization chain that can lead to arbitrary file writes
exp details in
https://github.com/top-think/framework/issues/2844 |
|---|
| 원천 | ⚠️ https://github.com/top-think/framework/issues/2844 |
|---|
| 사용자 | F10wers13eiCheng (UID 30725) |
|---|
| 제출 | 2023. 03. 04. AM 09:16 (4 연령 ago) |
|---|
| 모더레이션 | 2023. 03. 08. PM 07:10 (4 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 220462 [ThinkPHP 까지 6.0.13/6.1.1 권한 상승] |
|---|
| 포인트들 | 0 |
|---|