Thinkphp-zcms Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Thinkphp-zcms Project records in CISA KEV

No Thinkphp-zcms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Thinkphp-zcms · all components

TI-2020-13684 CVE-2020-19705 · GHSA-cm8v-9w86-5ghc

MEDIUM 44

thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00988 Published 2021-08-26 No fix listed CWE-89