Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal/admin_category/addpost.html alias parameter because the mishandling of a single quote character allows data/conf/route.php injection.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ThinkCMF 代码注入漏洞
Vulnerability Description
ThinkCMF是一套基于ThinkPHP的CMS（内容管理系统）。 ThinkCMF 5.0.190111版本中存在安全漏洞。远程攻击者攻击者可通过向portal / admin_category / addpost.html页面发送‘别名’参数利用该漏洞注入任意代码。
CVSS Information
N/A
Vulnerability Type
N/A