Submit #95005: ThinkPHP 6.1.1 display() presence of RCEinfo

TitleThinkPHP 6.1.1 display() presence of RCE
DescriptionThinkPHP is a free open source, fast and simple object-oriented lightweight PHP development framework, which was born for agile WEB application development and simplified enterprise application development. ThinkPHP has been adhering to the simple and practical design principle since its inception, while maintaining excellent performance and minimal code, it pays more attention to ease of use. Publishing under the Apache2 open source license agreement means that you can use ThinkPHP for free, and even allow you to release/sell your applications developed based on ThinkPHP as open source or commercial products. exp details in https://github.com/beicheng-maker/vulns/issues/7
Source⚠️ https://github.com/beicheng-maker/vulns/issues/7
User
 F10wers13eiCheng (UID 30725)
Submission02/26/2023 16:35 (4 years ago)
Moderation03/03/2023 07:44 (5 days later)
StatusDuplicate
VulDB entry220462 [ThinkPHP up to 6.0.13/6.1.1 deserialization]
Points0

Do you want to use VulDB in your project?

Use the official API to access entries easily!