https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:48:13 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-229656 EUVD-2026-229656 https://cve.radiocsirt.org/vuln/euvd-2026-229656 https://cve.radiocsirt.org/vuln/fkie_cve-2022-47945 <p>ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_on=true). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php.</p> <p>ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_on=true). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-47945 https://cve.radiocsirt.org/vuln/ghsa-p4qr-vq2g-22wp <p><strong>Affected:</strong> Packagist: topthink/framework</p> <p>ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (`lang_switch_on=true`). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including `pearcmd.php`.</p> <p><strong>Affected:</strong> Packagist: topthink/framework</p> <p>ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (`lang_switch_on=true`). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including `pearcmd.php`.</p> https://cve.radiocsirt.org/vuln/ghsa-p4qr-vq2g-22wp https://cve.radiocsirt.org/vuln/gsd-2022-47945 gsd-2022-47945 https://cve.radiocsirt.org/vuln/gsd-2022-47945