exploit/unix/webapp/thinkphp_rce

weaponized

ThinkPHP Multiple PHP Injection RCEs

view exploit source metasploittype exploitpublished 2018-12-10catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-9082US	high8.8OT critical	97.4% (100th)	KEV	2019-02-24
ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_…
CVE-2018-20062US	critical9.8OT critical	99.5% (100th)	KEV	2018-12-11
An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrat…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.