CVE-2019-9082—ThinkPHP Remote Code Execution Vulnerability

漏洞名称

ThinkPHP Remote Code Execution Vulnerability

描述

ThinkPHP contains an unspecified vulnerability that allows for remote code execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2019-9082

相关新闻文章

• Hackers target SSRF bugs in EC2-hosted sites to steal AWS credentialsApril 9, 2025
• Hackers exploit 2018 ThinkPHP flaws to install ‘Dama’ web shellsJune 6, 2024

相关 CWE

• CWE-306
• CWE-94