Opensourcebms vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Opensourcebms products: 1 record(s), with severity, exploitation and fixes.

Open Source Background Management System 1

Exploited only (KEV) →

CVE-2019-9082 High · 8.8 KEV Urgent · 76 Public exploit CWE-94 Feb 24, 2019

ThinkPHP Remote Code Execution Vulnerability

ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.