| Title | ThinkPHP presence of RCE |
|---|
| Description | ThinkPHP is an open source lightweight PHP framework born to simplify enterprise-level application development and agile WEB application development. It was first born in early 2006, officially changed its name to ThinkPHP on New Year's Day in 2007, and was released under the Apache2 open source protocol. ThinkPHP has been adhering to the simple and practical design principles since its inception, while maintaining excellent performance and minimal code, it also pays attention to ease of use.
Version 6.1.1 has an up-to-date deserialization chain that can lead to arbitrary file writes
exp details in
https://github.com/top-think/framework/issues/2844 |
|---|
| Source | ⚠️ https://github.com/top-think/framework/issues/2844 |
|---|
| User | F10wers13eiCheng (UID 30725) |
|---|
| Submission | 03/04/2023 09:16 (4 years ago) |
|---|
| Moderation | 03/08/2023 19:10 (4 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 220462 [ThinkPHP up to 6.0.13/6.1.1 deserialization] |
|---|
| Points | 0 |
|---|