VULNERABILITY INTELLIGENCE

CVE-2018-25270

CVSS score9.3 CRITICAL

EPSS probability0.89%

CISA KEVNot currently listed

Published2026-04-22

Last modified2026-06-17

CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoking functions through the routing parameter. Attackers can craft requests to the index.php endpoint with malicious function parameters to execute system commands with application privileges.

Weakness classification

CWE-639: Authorization Bypass Through User-Controlled Key

Primary references

disclosure@vulncheck.com — Product
disclosure@vulncheck.com — Broken Link
disclosure@vulncheck.com — Exploit, Third Party Advisory, VDB Entry
disclosure@vulncheck.com — Third Party Advisory