CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-12-11
NoneCms and ThinkPHP Framework Remote Code Execution (RCE) Vulnerability (CVE-2018-20062)
[Affected Scope] NoneCms V1.3 and underlying ThinkPHP 5.x framework-based web applications
[Impact] Unauthenticated remote attackers can execute arbitrary PHP code and gain full control of the target server by sending crafted HTTP requests
[Mitigation] Upgrade the ThinkPHP framework to the latest secure version, apply patches to NoneCms, or deploy Web Application Firewall (WAF) rules