漏洞描述
ThinkPHP是一个免费开源的PHP开发框架。ThinkPHP框架X-Forwarded-For存在SQL注入漏洞，可获取相关数据，甚至入侵服务器。
ThinkPHP X-Forwarded-For 头存在SQL注入漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2025-44136: MapTiler Tileserver-php v2.0 - Unauthenticated XSS
- POC CVE-2025-44137: MapTiler Tileserver-php v2.0 - Unauthenticated File Read
- POC generic-php-files: Generic PHP Backup Information Disclosure
- PHPGurukul Employee Record Management System 代码注入漏洞
- PHPJABBERS Restaurant Menu Maker Project 代码注入漏洞
- php-livechat-uploadimg-html-upload: PHP LiveChat Upload
- thinkphp-30-rce: Thinkphp 3.0 RCE
- thinkphp-5.0.23-rce: Thinkphp debug 执行任意命令
- thinkphp-50-rce: Thinkphp 5.0 RCE
- thinkphp-v6-file-write: thinkphp-v6-file-write
- weiphp-path-traversal: Weiphp Path Traversal
- weiphp-sql: weiphp sql
- ThinkPHP /index.php 信息泄露漏洞（CVE-2022-25481）