Vulnerabilities > CVE-2021-44892 - Unspecified vulnerability in Thinkphp 3.2.3
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
A Remote Code Execution (RCE) vulnerability exists in ThinkPHP 3.x.x via value[_filename] in index.php, which could let a malicious user obtain server control privileges.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |