ThinkCMF X2.2.2
Approved changes feed: RSS · Atom
cpe:2.3:a:thinkcmf:thinkcmf:x2.2.2:*:*:*:*:*:*:*part: a version: x2.2.2 update: *
| Vendor | Thinkcmf (e54ab464-b3d7-5fa1-b2e4-65b49f9fb345) |
|---|---|
| Product | Thinkcmf (585614f2-9d96-5bad-bd50-53ba1891d2bd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/thinkcmf/thinkcmf |
purl2cpe | 2026-06-01 10:15:44.609470 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-20601 |
vulnerable | 2026-06-08 05:22:30.464345 |
Details available
An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.
Published: 2021-12-22T22:43:08.000Z
Updated: 2024-08-04T14:22:25.124Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19898 |
vulnerable | 2026-06-08 05:11:16.306074 |
Details available
ThinkCMF X2.2.2 has SQL Injection via the method edit_post in ArticleController.class.php and is exploitable by normal authenticated users via the post[id][1] parameter in an article edit_post action.
Published: 2018-12-06T04:00:00.000Z
Updated: 2024-09-17T01:35:49.225Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19897 |
vulnerable | 2026-06-08 05:11:16.305792 |
Details available
ThinkCMF X2.2.2 has SQL Injection via the function _listorders() in AdminbaseController.class.php and is exploitable with the manager privilege via the listorders[key][1] parameter in a Link listorders action.
Published: 2018-12-06T04:00:00.000Z
Updated: 2024-09-16T17:03:14.855Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19896 |
vulnerable | 2026-06-08 05:11:16.305424 |
Details available
ThinkCMF X2.2.2 has SQL Injection via the function delete() in SlideController.class.php and is exploitable with the manager privilege via the ids[] parameter in a slide action.
Published: 2018-12-06T04:00:00.000Z
Updated: 2024-09-16T16:53:24.149Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19895 |
vulnerable | 2026-06-08 05:11:16.305028 |
Details available
ThinkCMF X2.2.2 has SQL Injection via the function edit_post() in NavController.class.php and is exploitable with the manager privilege via the parentid parameter in a nav action.
Published: 2018-12-06T04:00:00.000Z
Updated: 2024-09-17T03:48:28.894Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19894 |
vulnerable | 2026-06-08 05:11:16.304544 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.