CVE-2019-7580
Published · Updated
25Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendepss 9.9%
from disclosure to weapon
Published on NVDFeb 7
VulnCheck+1609d
exploitation probability
9.9%top 5% of all CVEs
observed exploitation
yesVulnCheck
ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal/admin_category/addpost.html alias parameter because the mishandling of a single quote character allows data/conf/route.php injection.
Affected products
n/a · n/a