Lyther/VulnDiscover

Lyther/VulnDiscover

GitHubGitHub
GitHubgithub.com
Releases0
Stars3
Vulnerability discovery history and log
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-25481↗
7.5 HIGH5 MEDIUM

ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an intended feature of the debugging mode.