ThinkPHP 2

Organization

CVE-2019-9082: ThinkPHP Remote Code Execution Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Nov 03, 2021

ThinkPHP contains an unspecified vulnerability that allows for remote code execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.

Vulnerabilities & Patching

CVE-2018-20062: ThinkPHP "none Cms" Remote Code Execution Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Nov 03, 2021

ThinkPHP "noneCms" contains an unspecified vulnerability that allows for remote code execution through crafted use of the filter parameter.

Vulnerabilities & Patching