CVE-2025-63889

概要

参考情報

• gist.github.com/Master-0-0/dd63209602f04267f1a27a75a064df26 · Mitigation
• yuque.com/lcc316/df0kgm/xqkrw5rfz5vqxo9t · Permissions Required

thinkphp のその他の脆弱性

• CVE-2018-25270緊急 9.8ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoki…
• CVE-2025-63888緊急 9.8The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability.
• CVE-2025-50707緊急 9.8An issue in thinkphp3 v.3.2.5 allows a remote attacker to execute arbitrary code via the index.php component
• CVE-2025-50706緊急 9.8An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function
• CVE-2024-48112緊急 9.8A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary co…