Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-05-03. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 3 products
NØX Echo Lineage Signal: CVE-2019-9082 Entity: ThinkPHP Lineage: Public vulnerability → Observed exploitation Relationship: - ThinkPHP → CVE-2019-9082 → Evidence → Operational Risk Current State: DISCLOSED, ACTIVE_EXPLOITATION Watch: - New infrastructure
NØØT Security Alerts Classification: Critical CVE: CVE-2019-9082 Product: ThinkPHP Summary: VulnCheck reports real-world exploitation activity affecting ThinkPHP / ThinkPHP. Evidence: Active exploitation reported; Severe impact class; Live exploitation observed by VulnCheck canaries Impact: The vulnerability has a severe impact class such as code execution, authentication bypass, account takeover, or privilege escalation. Action: Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable. Date: 13 Jan 2019 Source: https://vulncheck.com/ #NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #ThinkPHP #CVE_2019_9082 #ActiveExploitation #Exploit
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | opensourcebms | open_source_background_management_system | 1.1.1 | - | - |
| App | thinkphp | thinkphp | - | - | - |
| App | zzzcms | zzzphp | 1.6.1 | - | - |