CVE-2024-31615

ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:thinkcmf:thinkcmf:6.0.9:*:*:*:*:*:*:*

History

16 Apr 2025, 18:43

Type Values Removed Values Added
First Time Thinkcmf thinkcmf
Thinkcmf
References () https://github.com/huajiuqi/bug/blob/main/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md - () https://github.com/huajiuqi/bug/blob/main/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md - Exploit, Third Party Advisory
CPE cpe:2.3:a:thinkcmf:thinkcmf:6.0.9:*:*:*:*:*:*:*

25 Apr 2024, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-25 20:15

Updated : 2025-04-16 18:43


NVD link : CVE-2024-31615

Mitre link : CVE-2024-31615


JSON object : View

Products Affected

thinkcmf

  • thinkcmf
CWE

No CWE.