CVE-2019-7580

ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal/admin_category/addpost.html alias parameter because the mishandling of…

published February 7, 2019

CVSS
—
EPSS
10%
Percentile
95.6
In the wild
Unconfirmed
What it is

ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal/admin_category/addpost.html alias parameter because the mishandling of a single quote character allows data/conf/route.php injection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09935 · 95.6th percentile
Published
2019-02-07T17:00Z
EPSS history
Timeline
  • 07 FEB 17:00Z
    ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal/admin_category/addpost.html alias parameter because the mishandling of…
    cvelistv5