ThinkCMF X2.2.3
Approved changes feed: RSS · Atom
cpe:2.3:a:thinkcmf:thinkcmfx:x2.2.3:*:*:*:*:*:*:*part: a version: x2.2.3 update: *
| Vendor | Thinkcmf (e54ab464-b3d7-5fa1-b2e4-65b49f9fb345) |
|---|---|
| Product | Thinkcmfx (76c4b2e9-f69e-5951-a06e-ac2b4a7eb6cc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/thinkcmf/cmfx |
purl2cpe | 2026-06-01 10:15:44.604492 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-16141 |
vulnerable | 2026-06-08 05:11:04.279240 |
Details available
ThinkCMF X2.2.3 has an arbitrary file deletion vulnerability in do_avatar in \application\User\Controller\ProfileController.class.php via an imgurl parameter with a ..\ sequence. A member user can delete any file on a Windows server.
Published: 2018-08-30T05:00:00.000Z
Updated: 2024-08-05T10:17:37.673Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.