Security Advisory

CVE-2019-7580

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-02-07 17:00:00

Last updated 2024-09-16 19:50:55

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal/admin_category/addpost.html alias parameter because the mishandling of a single quote character allows data/conf/route.php injection.

← Browse all CVEs View on cve.org ↗