ThinkPHP 5.0.1 - Remote Code Execution

披露于 2025/11/20 · 更新于 2026/01/13

CVSS 评分—/ 10.0

EPSS 概率—利用概率预测

漏洞描述

ThinkPHP 5.0.1 allows remote unauthenticated attackers to execute arbitrary code via the 's' parameter.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 ThinkPHP 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
thinkphp6_arbitrary_writeRCE ThinkPHP 6.0.0~6.0.1 - Arbitrary File Write ThinkPHP	严重	—	—	PoCEXP	2025/07/09
CVE-2024-44902RCE CVE-2024-44902 ThinkPHP	严重	9.8	72.6%	PoCEXP	2024/09/09
thinkphp(6_0_12)_serializer ThinkPHP 6.0.12LTS 反序列漏洞 ThinkPHP	严重	—	—	PoCEXP	2024/08/30
thinkphp_errors ThinkPHP Errors - Sensitive Information Exposure ThinkPHP	中危	—	—	PoCEXP	2024/01/15
thinkphp_509_information_disclosure ThinkPHP 5.0.9 - Information Disclosure ThinkPHP	严重	—	—	PoCEXP	2023/05/28
thinkphp_5023_rce ThinkPHP 5.0.23 - Remote Code Execution ThinkPHP	严重	—	—	PoCEXP	2023/05/28