CVE-2019-7580

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal/admin_category/addpost.html alias parameter because the mishandling of a single quote character allows data/conf/route.php injection.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/shadowsock5/ThinkCMF-5.0.190111/blob/master/README.mdExploit, Third Party Advisory
https://xz.aliyun.com/t/3997Exploit, Third Party Advisory
https://github.com/shadowsock5/ThinkCMF-5.0.190111/blob/master/README.mdExploit, Third Party Advisory
https://xz.aliyun.com/t/3997Exploit, Third Party Advisory

Timeline

Published: Feb 7, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-75818.8The parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafte CVE-2019-75828.8The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file tha CVE-2019-75859.8An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param ar CVE-2019-75879.8Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled CVE-2019-75887.0A vulnerability in the exacqVision Enterprise System Manager (ESM) v5.12.2 application whereby unauthorized privilege escalation can potenti CVE-2019-75899.8A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malici CVE-2019-75907.8ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated us CVE-2019-75939.1Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving CVE-2019-75949.1Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption operations involving th CVE-2019-76086.1Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive info CVE-2019-760910.0Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the CVE-2019-76109.0Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger. If a Kibana instance has the setting xpa