Read the docs

Opensourcebms

Records1All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Opensourcebms records in CISA KEV
TI-2019-06557 ThinkPHP Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Open Source Background Management System 1 record CRITICAL

Records

1 record in Open Source Background Management System · all components

TI-2019-06557 CVE-2019-9082 · GHSA-qpgr-mp84-gp92

ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows…

Priority CRITICAL 97KEV

ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.97419 Published 2019-02-24 No fix listed CWE-306
Open these records in search →