thinkcmf-lfi: Thinkcmf lfi

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://beaglesecurity.com/blog/vulnerability/thinkcmf-lfi.html
• https://github.com/ping-0day/templates/blob/main/thinkcmflfi.yaml
• https://github.com/projectdiscovery/nuclei-templates/blob/main/vulnerabilities/thinkcmf/thinkcmf-lfi.yaml
• https://github.com/jas502n/ThinkCMF_getshell
• https://yaklang.com/Yaklab/wiki/DetectionPlug-in/ThinkCMF/
• https://www.freebuf.com/vuls/217586.html

Related Vulnerabilities

• thinkcmf-write-shell: Thinkcmf write shell
• PoCthinkcmf-file-include: thinkCMF 文件包含
• PoCCVE-2020-20601: ThinkCMF X2.2.2 - Remote Code Execution
• PoCthinkcmf-lfi: ThinkCMF - Local File Inclusion
• PoCthinkcmf-rce: ThinkCMF - Remote Code Execution
• ThinkCMF 弱口令漏洞
• thinkcmf 任意文件包含 x1.6.0-x2.2.3
• thinkcmf 任意文件写入 x1.6.0-x2.2.3
• ThinkCMF display 任意文件读取
• ThinkCMF-日志文件泄漏
• ThinkCMF 2.2.3 comment页面content参数-前台代码执行
• ThinkCMF 2.2.3 Api文件content参数-前台代码执行