Skip to content
OpenAdvisories

Package · Packagist

topthink/framework

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2022-44289

    Thinkphp has a code logic error

    Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell.

    topthink/framework Packagist
  • High 7.7
    CVE-2021-23592

    Deserialization of Untrusted Data

    The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class.

    topthink/framework Packagist
  • High 8.8
    CVE-2021-44892

    ThinkPHP Remote Code Execution (RCE) vulnerability

    A Remote Code Execution (RCE) vulnerability exists in ThinkPHP 3.x.x via value[_filename] in index.php, which could let a malicious user obtain server control privileges.

    topthink/framework Packagist