CVE-2020-20601 PoC — ThinkCMF 代码注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20601.yaml

Associated Vulnerability

Title: ThinkCMF 代码注入漏洞 (CVE-2020-20601)
Description:An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.

Description

ThinkCMF X2.2.2 and below contain a remote code execution caused by processing crafted packets, letting attackers execute arbitrary code remotely, exploit requires sending malicious packets.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →