CVE-2019-9082: ThinkPHP Remote Code Execution Vulnerability
First published: Sun Feb 24 2019(Updated: )
ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ThinkPHP ThinkPHP | <3.2.4 | |
| Opensourcebms Open Source Background Management System | =1.1.1 | |
| ZZZCMS zzzphp | =1.6.1 | |
| ThinkPHP ThinkPHP | ||
| <3.2.4 | ||
| =1.1.1 | ||
| =1.6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/157218/ThinkPHP-5.0.23-Remote-Code-Execution.html
- https://github.com/xiayulei/open_source_bms/issues/33
- https://www.exploit-db.com/exploits/46488/
- https://www.bleepingcomputer.com/news/security/hackers-exploit-2018-thinkphp-flaws-to-install-dama-web-shells/
- https://nvd.nist.gov/vuln/detail/CVE-2019-9082
Frequently Asked Questions
What is CVE-2019-9082?
CVE-2019-9082 is a remote code execution vulnerability in ThinkPHP before version 3.2.4, which can be exploited to execute remote commands.
What is the severity of CVE-2019-9082?
CVE-2019-9082 has a severity score of 8.8, which is classified as critical.
What software products are affected by CVE-2019-9082?
ThinkPHP before version 3.2.4, Open Source BMS v1.1.1, and ZZZCMS zzzphp 1.6.1 are affected by CVE-2019-9082.
How can CVE-2019-9082 be exploited?
CVE-2019-9082 can be exploited by sending a specially crafted request to the affected software's public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= endpoint.
Are there any known exploits of CVE-2019-9082?
Yes, there are known exploits of CVE-2019-9082 available at the following references: [1] [2] [3].
- collector/nvd-index
- agent/type
- agent/description
- agent/softwarecombine
- agent/severity
- agent/title
- agent/weakness
- agent/author
- collector/bleeping-computer
- source/BleepingComputer
- alias/CVE-2018-20062
- alias/CVE-2019-9082
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/references
- agent/event
- agent/tags
- collector/nvd-cve
- source/NVD
- vendor/thinkphp
- canonical/thinkphp thinkphp
- vendor/opensourcebms
- canonical/opensourcebms open source background management system
- version/opensourcebms open source background management system/1.1.1
- vendor/zzzcms
- canonical/zzzcms zzzphp
- version/zzzcms zzzphp/1.6.1