ThinkPHP Framework vulnerable to remote code execution

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-47945 · ADVISORY
• top-think/framework commit c4acb8b · WEB
• top-think/framework · PACKAGE
• top-think/framework · WEB
• tttang.com/archive/1865 · WEB
• tttang.com/archive/1865 · Exploit

topthink/framework のその他の脆弱性

• CVE-2025-50706緊急 9.8An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function
• CVE-2024-44902緊急 9.8A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.
• CVE-2024-34467中 6.1ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in think_exception.tpl.
• CVE-2022-44289高 8.8Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell.
• CVE-2022-38352緊急 9.8ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This…