CVE-2025-50707

概要

参考情報

• xinyisleep.github.io/2024-07-15/Thinkphp3.%E6%96%87%E4%BB%B6%E5%8C%85%E5%90%AB-CNVD-2024-39045 · Exploit
• xinyisleep.github.io/CVE-2025-50707.md · Third Party Advisory

thinkphp のその他の脆弱性

• CVE-2018-25270緊急 9.8ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoki…
• CVE-2025-63889高 7.5The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file …
• CVE-2025-63888緊急 9.8The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability.
• CVE-2025-50706緊急 9.8An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function
• CVE-2024-48112緊急 9.8A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary co…