Here's the page we think you wanted. See search results instead:

ThinkPHP Remote Code Execution

Strike ID:
E19-0zh61
CVSS:
9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
False Positive:
f
Variants:
6
Year:
2018

Description

This strike exploits a remote code execution in ThinkPHP framework. The flaw is rooted within the 'invokefunction' method as a consequence of no parameter validation. A remote, unauthenticated attacker may thus be able to execute code on the vulnerable machine with the permissions of the user running the web server.

References

https://devcentral.f5.com/articles/thinkphp-5x-remote-code-execution-vulnerability-32902