Product by ThinkPHP
ThinkPHP noneCms
12 known vulnerabilities in ThinkPHP noneCms (ThinkPHP), 1 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-20062 | ThinkPHP "noneCms" Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| High | CVE-2020-18647 | ThinkPHP noneCms: Information Disclosure | 7.5 | |
| High | CVE-2020-18646 | ThinkPHP noneCms: Information Disclosure | 7.5 | |
| High | CVE-2018-6029 | ThinkPHP noneCms: Server-Side Request Forgery (SSRF) | 7.5 | |
| Medium | CVE-2018-6022 | ThinkPHP noneCms: Path Traversal | 6.5 | |
| Medium | CVE-2020-23371 | ThinkPHP noneCms: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2018-7219 | ThinkPHP noneCms: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2020-23373 | ThinkPHP noneCms: Cross-Site Scripting (XSS) | 5.4 | |
| Medium | CVE-2020-23374 | ThinkPHP noneCms: Cross-Site Scripting (XSS) | 5.4 | |
| Medium | CVE-2020-18282 | ThinkPHP noneCms: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2019-16721 | ThinkPHP noneCms: Cross-Site Request Forgery (CSRF) | 6.5 | |
| Medium | CVE-2020-23376 | ThinkPHP noneCms: Cross-Site Scripting (XSS) | 6.1 |