thinkphp-30-rce: Thinkphp 3.0 RCE

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.akamai.com/blog/security-research/2024-thinkphp-applications-exploit-1-days-dama-webshell
• https://nvd.nist.gov/vuln/detail/CVE-2018-20062
• https://nvd.nist.gov/vuln/detail/CVE-2019-9082
• https://www.tenable.com/blog/thinkphp-remote-code-execution-vulnerability-used-to-deploy-variety-of-malware-cve-2018-20062
• https://www.f5.com/labs/articles/threat-actors-rapidly-adopt-new-thinkphp-rce-exploit-to-spread-i
• https://www.sonicwall.com/blog/thinkphp-remote-code-execution-rce-bug-is-actively-being-exploited
• https://github.com/Mr-xn/thinkphp_lang_RCE
• https://security.snyk.io/vuln/SNYK-PHP-TOPTHINKTHINKPHP-173728
• https://www.exploit-db.com/exploits/46150
• https://nvd.nist.gov/vuln/detail/CVE-2021-44892
• https://pentest-tools.com/vulnerabilities-exploits/thinkphp-2-3-remote-code-execution_25846
• https://github.com/vulhub/vulhub/blob/master/thinkphp/2-rce/README.md
• https://www.exploit-db.com/exploits/48333

Related Vulnerabilities

• PoCCVE-2019-9082: ThinkPHP < 3.2.4 - Remote Code Execution
• thinkphp-5.0.23-rce: Thinkphp debug 执行任意命令
• thinkphp-50-rce: Thinkphp 5.0 RCE
• thinkphp-v6-file-write: thinkphp-v6-file-write
• ThinkPHP /index.php 信息泄露漏洞（CVE-2022-25481）
• PoCCVE-2018-20062: ThinkPHP 5.0.23 - Remote Code Execution
• PoCCVE-2022-25481: ThinkPHP 5.0.24 - Information Disclosure
• PoCCVE-2022-47945: Thinkphp Lang - Local File Inclusion
• PoCCNVD-2024-39045: Thinkphp3 文件包含漏洞
• PoCCVE-2022-33107: ThinkPHP 6.0.12 反序列化 RCE
• PoCthinkphp-errors: ThinkPHP Errors - Sensitive Information Exposure