Lucene search

K
osvGoogleOSV:CVE-2019-7580
HistoryFeb 07, 2019 - 5:29 p.m.

CVE-2019-7580

2019-02-0717:29:00
Google
osv.dev
5

8.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.0%

ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal/admin_category/addpost.html alias parameter because the mishandling of a single quote character allows data/conf/route.php injection.

8.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.0%

Related for OSV:CVE-2019-7580