References https://www.exploit-db.com/exploits/46150 https://github.com/vulhub/vulhub/blob/master/thinkphp/5.0.23-rce/README.md https://pentest-tools.com/vulnerabilities-exploits/thinkphp-5023-remote-code-execution_27114 https://www.fortiguard.com/outbreak-alert/thinkphp-rce https://beaglesecurity.com/blog/vulnerability/thinkphp-thinkphp-5-0-22rce.html https://nvd.nist.gov/vuln/detail/cve-2018-20062 https://www.exploit-db.com/exploits/45978 https://github.com/vulhub/vulhub/blob/master/thinkphp/5-rce/README.md https://blog.thinkphp.cn/869075 https://nsfocusglobal.com/thinkphp-5-0-5-0-23-5-1-0-5-1-31-and-5-2-remote-code-execution-vulnerability-handling-guide/
Related VulnerabilitiesPoCCVE-2019-9082: ThinkPHP < 3.2.4 - Remote Code Executionthinkphp-30-rce: Thinkphp 3.0 RCEthinkphp-5.0.23-rce: Thinkphp debug 执行任意命令thinkphp-v6-file-write: thinkphp-v6-file-writeThinkPHP /index.php 信息泄露漏洞(CVE-2022-25481)PoCCVE-2018-20062: ThinkPHP 5.0.23 - Remote Code ExecutionPoCCVE-2022-25481: ThinkPHP 5.0.24 - Information DisclosurePoCCVE-2022-47945: Thinkphp Lang - Local File InclusionPoCCNVD-2024-39045: Thinkphp3 文件包含漏洞PoCCVE-2022-33107: ThinkPHP 6.0.12 反序列化 RCEPoCthinkphp-errors: ThinkPHP Errors - Sensitive Information Exposure