Description
ThinkPHP是一个快速、兼容而且简单的轻量级国产PHP开发框架。2020年1月10日，ThinkPHP团队发布一个补丁更新，修复了一处由不安全的SessionId导致的任意文件操作漏洞。
ThinkPHP6 任意文件操作漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Loneyers/ThinkPHP6_Anyfile_operation_write
https://sueisok.github.io/blog/thinkphp6.0/
https://blog.csdn.net/weixin_53090346/article/details/126198201
https://zhuanlan.zhihu.com/p/104473609
https://www.aliyun.com/notice/116315
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/Thinkphp/Thinkphp%206.x%20%E6%BC%8F%E6%B4%9E/Thinkphp%206.1%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%9B%E5%BB%BA%26%E5%88%A0%E9%99%A4%E6%BC%8F%E6%B4%9E/
https://guokeya.github.io/post/gmCesqdBk/
https://www.cnblogs.com/Litsasuk/articles/18399299
https://cloud.tencent.com/developer/article/1610604
https://j0k3r.top/2020/03/02/ThinkPHP_v6.0.0_ArbitraryFileWriting/
https://www.anquanke.com/post/id/257485
https://community.f5.com/kb/technicalarticles/thinkphp-6-0-0---6-0-1-arbitrary-file-write-vulnerability/281591
https://b3logfile.com/pdf/article/1579965339516.pdf