Skip to content

Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

ThinkPHP: actively exploited vulnerabilities

2 vulnerabilities in ThinkPHP products (ThinkPHP) are in CISA’s catalog of exploited vulnerabilities. Last added: November 3, 2021.

0 vulnerabilities added in the last 12 months
2 exploited vulnerabilities in the catalog, in total
0 added in the last 30 days

By category

Add just one ThinkPHP category to your radar, or open its page.

Frameworks and libraries 2 vulnerabilities

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

ThinkPHP 2 vulnerabilities · Frameworks

Name used by CISA: ThinkPHP. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this ThinkPHP list.

Rank 1ThinkPHP
CVE-2018-20062
CVE from 2018, added in 2021
ThinkPHP "noneCms" Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
Added
Nov 3, 2021
CISA deadline
181 days
CVSS severity
9.8 (critical)
Rank 2ThinkPHP
CVE-2019-9082
CVE from 2019, added in 2021
ThinkPHP Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
Added
Nov 3, 2021
CISA deadline
181 days
CVSS severity
8.8 (high)

Indicative classification, based on the vendor and product names given by CISA. How products are classified.