{"id":7943,"date":"2019-01-21T03:53:25","date_gmt":"2019-01-21T03:53:25","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=7943"},"modified":"2026-04-17T18:07:55","modified_gmt":"2026-04-17T18:07:55","slug":"thinkphp-5-0-5-0-23-5-1-0-5-1-31-and-5-2-remote-code-execution-vulnerability-handling-guide","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/thinkphp-5-0-5-0-23-5-1-0-5-1-31-and-5-2-remote-code-execution-vulnerability-handling-guide\/","title":{"rendered":"ThinkPHP 5.0-5.0.23, 5.1.0-5.1.31, and 5.2.* Remote Code Execution Vulnerability Handling Guide"},"content":{"rendered":"


\n<\/p>\n

<\/a>1 Vulnerability Overview<\/strong><\/h2>\n

Recently, ThinkPHP 5.0-5.0.23 was found to have a remote code execution (RCE) vulnerability. The NSFOCUS Falcon Team carried out tests and found that ThinkPHP 5.0-5.0.23, 5.1.0-5.1.31, and 5.2.* were also prone to this vulnerability, which could be triggered in both Linux and Windows systems.<\/p>\n

This vulnerability occurs because the method in the Request class does not properly handle user-controlled data. Overriding variables, an attacker could invoke any functions in the Request class. Crafting a request, he or she can overwrite the attribute value of the Request class. All related users should stay wary and take precautions as soon as possible.<\/p>\n

The test result is as follows:<\/p>\n

\"Red<\/a>
\n<\/strong><\/p>\n

<\/a>2 Scope of Impact<\/strong><\/h2>\n

Affected Versions<\/p>\n