| Название | ThinkPHP presence of RCE |
|---|
| Описание | ThinkPHP is an open source lightweight PHP framework born to simplify enterprise-level application development and agile WEB application development. It was first born in early 2006, officially changed its name to ThinkPHP on New Year's Day in 2007, and was released under the Apache2 open source protocol. ThinkPHP has been adhering to the simple and practical design principles since its inception, while maintaining excellent performance and minimal code, it also pays attention to ease of use.
Version 6.1.1 has an up-to-date deserialization chain that can lead to arbitrary file writes
exp details in
https://github.com/top-think/framework/issues/2844 |
|---|
| Источник | ⚠️ https://github.com/top-think/framework/issues/2844 |
|---|
| Пользователь | F10wers13eiCheng (UID 30725) |
|---|
| Представление | 04.03.2023 09:16 (4 лет назад) |
|---|
| Модерация | 08.03.2023 19:10 (4 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 220462 [ThinkPHP до 6.0.13/6.1.1 эскалация привилегий] |
|---|
| Баллы | 0 |
|---|