CVE-2025-63888

概要

参考情報

• gist.github.com/Master-0-0/0bf54cbb335b586b42b0db0db804e7aa · Mitigation
• yuque.com/lcc316/df0kgm/mglhbxltgbmzfh2s · Permissions Required

thinkphp のその他の脆弱性

• CVE-2018-25270緊急 9.8ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoki…
• CVE-2025-63889高 7.5The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file …
• CVE-2025-50707緊急 9.8An issue in thinkphp3 v.3.2.5 allows a remote attacker to execute arbitrary code via the index.php component
• CVE-2025-50706緊急 9.8An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function
• CVE-2024-48112緊急 9.8A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary co…