thinkphp-v6-file-write: thinkphp-v6-file-write

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://community.f5.com/kb/technicalarticles/thinkphp-6-0-0---6-0-1-arbitrary-file-write-vulnerability/281591
• https://pentest-tools.com/vulnerabilities-exploits/thinkphp-600-601-arbitrary-file-write_25980
• https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/vulnerability/thinkphp-v6-file-write.yaml
• https://github.com/Loneyers/ThinkPHP6_Anyfile_operation_write
• https://hackerqwq.github.io/2021/10/18/TP6%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%86%99%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/
• https://cloud.tencent.com/developer/article/2283066
• https://cn-sec.com/archives/251475.html
• https://docs.escape.tech/documentation/platform/vulnerabilities/thinkphp6_arbitrary_write/

Related Vulnerabilities

• PoCCVE-2026-73034: DB-GPT <= 0.8.1 - Arbitrary File Write
• PoCCVE-2026-54917: SeaweedFS <= 4.29 - Path Traversal File Write
• PoCCVE-2026-12898: All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write
• PoCCVE-2026-25895: FUXA <= 1.2.9 - Unauthenticated Path Traversal to Arbitrary File Write
• PoCCVE-2026-49049: JoomShaper Helix3 <=3.1.0 - Unauthenticated Arbitrary JSON File Write
• PoCCVE-2026-50160: Hoppscotch <= 2026.4.1 - Mass Assignment JWT_SECRET Overwrite
• PoCCVE-2026-1890: LeadConnector < 3.0.22 - Unauthenticated Arbitrary Data Write
• PoCCVE-2026-48282: Adobe ColdFusion - RDS Arbitrary File Write
• NGINX ngx_http_rewrite_module 堆缓冲区溢出漏洞
• PoCCVE-2026-38360: dash-uploader 0.1.0 - 0.7.0a2 - Unauthenticated Arbitrary File Write via Path Traversal
• PoCCVE-2025-59342: esm.sh <= v136 - Arbitrary File Write via Path Traversal
• PoCCVE-2025-67303: ComfyUI-Manager < 3.38 - Configuration Overwrite
• 技嘉｜Gigabyte Control Center - Arbitrary File Write