TI-2024-20894 CVE-2024-31615 · GHSA-4gp6-hcg2-gfh6
ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php.
Priority HIGH 82
ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php.
Vulnerabilities
14 records
TI-2020-15874 CVE-2020-25915 · GHSA-4847-gqxx-v9xp
Cross Site Scripting (XSS) vulnerability in UserController.php in ThinkCMF version 5.1.5…
Priority MEDIUM 58
Cross Site Scripting (XSS) vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute arbitrary code via crafted user_login.
TI-2022-19439 CVE-2022-40849 · GHSA-m9mf-rqx6-2xpc
ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS).
Priority MEDIUM 58
ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS).
TI-2022-19215 CVE-2022-40489 · GHSA-6xw3-cpqj-8mxr
ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability…
Priority HIGH 71
ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.
TI-2021-17614 CVE-2021-40616 · GHSA-v25c-8349-v2q3
thinkcmf v5.1.7 has an unauthorized vulnerability.
Priority LOW 30
thinkcmf v5.1.7 has an unauthorized vulnerability.
TI-2020-13886 CVE-2020-20601 · GHSA-r2mp-8crc-chh7
An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.
Priority MEDIUM 52
An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.
TI-2020-13325 CVE-2020-18151 · GHSA-842m-vp3r-qwwr
Cross Site Request Forgery (CSRF) vulnerability in ThinkCMF v5.1.0, which can add an admin account.
Priority LOW 29
Cross Site Request Forgery (CSRF) vulnerability in ThinkCMF v5.1.0, which can add an admin account.
TI-2019-05352 CVE-2019-7580 · GHSA-ch88-q4cc-927c
ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the…
Priority MEDIUM 50
ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal/admin_category/addpost.html alias parameter because the mishandling of a single quote character allows data/conf/route.php injectio…
TI-2019-04756 CVE-2019-6713 · GHSA-2r7q-w9hc-4rq3
app\admin\controller\RouteController.php in ThinkCMF 5.0.190111 allows remote attackers…
Priority MEDIUM 47
app\admin\controller\RouteController.php in ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code by using vectors involving portal/List/index and list/:id to inject this code into data\conf\route.php…
TI-2018-14098 CVE-2018-19898 · GHSA-6598-2m88-f7xr
ThinkCMF X2.2.2 has SQL Injection via the method edit_post in ArticleController.class.php…
Priority MEDIUM 41
ThinkCMF X2.2.2 has SQL Injection via the method edit_post in ArticleController.class.php and is exploitable by normal authenticated users via the post[id][1] parameter in an article edit_post action.
TI-2018-14097 CVE-2018-19897 · GHSA-hxh4-c2q3-hhx4
ThinkCMF X2.2.2 has SQL Injection via the function _listorders() in…
Priority LOW 34
ThinkCMF X2.2.2 has SQL Injection via the function _listorders() in AdminbaseController.class.php and is exploitable with the manager privilege via the listorders[key][1] parameter in a Link listorders action.
TI-2018-14096 CVE-2018-19896 · GHSA-xm6g-crvf-pxf3
ThinkCMF X2.2.2 has SQL Injection via the function delete() in SlideController.class.php…
Priority LOW 34
ThinkCMF X2.2.2 has SQL Injection via the function delete() in SlideController.class.php and is exploitable with the manager privilege via the ids[] parameter in a slide action.
TI-2018-14095 CVE-2018-19895 · GHSA-j5gf-jf5q-55hq
ThinkCMF X2.2.2 has SQL Injection via the function edit_post() in NavController.class.php…
Priority LOW 34
ThinkCMF X2.2.2 has SQL Injection via the function edit_post() in NavController.class.php and is exploitable with the manager privilege via the parentid parameter in a nav action.
TI-2018-14094 CVE-2018-19894 · GHSA-954q-5jxp-gh7q
ThinkCMF X2.2.2 has SQL Injection via the functions check() and delete() in…
Priority LOW 34
ThinkCMF X2.2.2 has SQL Injection via the functions check() and delete() in CommentadminController.class.php and is exploitable with the manager privilege via the ids[] parameter in a commentadmin action.