ThinkCMF

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

ThinkCMF records in CISA KEV

No ThinkCMF vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Thinkcmf 14 records HIGH Thinkcmfx 1 record LOW

Records

1 record in Thinkcmfx · all components

TI-2018-11541 CVE-2018-16141 · GHSA-mjm2-8vwx-pq95

ThinkCMF X2.2.3 has an arbitrary file deletion vulnerability in do_avatar in…

LOW 31

ThinkCMF X2.2.3 has an arbitrary file deletion vulnerability in do_avatar in \application\User\Controller\ProfileController.class.php via an imgurl parameter with a ..\ sequence.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00939 Published 2018-08-30 No fix listed CWE-22

Open these records in search →

Critical	3
High	8
Medium	5
Low	0
No CVSS	0