CVE-2019-9082

Related Files

ThinkPHP 5.0.23 Remote Code Execution

Posted Apr 14, 2020

Authored by wvu | Site metasploit.com

This Metasploit module exploits one of two PHP injection vulnerabilities in the ThinkPHP web framework to execute code as the web user. Versions up to and including 5.0.23 are exploitable, though 5.0.23 is vulnerable to a separate vulnerability. The module will automatically attempt to detect the version of the software. Tested against versions 5.0.20 and 5.0.23 as can be found on Vulhub.

tags | exploit, web, php, vulnerability

advisories | CVE-2018-20062, CVE-2019-9082

SHA-256 | 87a750017e1450c65c2d4bc6d1f3d6577145d8196416598c9ff417583b4d8502

Download | Favorite | View

zzzphp CMS 1.6.1 Cross Site Request Forgery

Posted Mar 4, 2019

Authored by Yang Chenglong

zzzphp CMS version 1.6.1 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

advisories | CVE-2019-9082

SHA-256 | 3305948ea10cafcf561b9aa0131e5da0eae0c8bcbf0b6ebc91a1f629473723df

Download | Favorite | View