Non évaluée
app\admin\controller\RouteController.php in ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code by using vectors involving porta...
CVE-2019-6713
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
app\admin\controller\RouteController.php in ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code by using vectors involving portal/List/index and list/:id to inject this code into data\conf\route.php, as demonstrated by a file_put_contents call.
Références
- advisory thinkcmf.com
- report ttk7.cn