GHSA-p4qr-vq2g-22wp

ghsaUSosv

ThinkPHP Framework vulnerable to remote code execution

view advisory published 2022-12-23Licence: CC-BY-4.0

ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (`lang_switch_on=true`). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including `pearcmd.php`.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-47945US	critical9.8	30.2% (98th)	—	2022-12-23
ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_on=true). An unauthenticated and remote a…

references

External citations — patches, advisories, analysis.

https://github.com/top-think/frameworkPACKAGE
https://github.com/top-think/framework/commit/c4acb8b4001b98a0078eda25840d33e295a7f099WEB
https://github.com/top-think/framework/compare/v6.0.13...v6.0.14WEB
https://nvd.nist.gov/vuln/detail/CVE-2022-47945ADVISORY
https://tttang.com/archive/1865WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan