Opensourcebms vulnerabilities
We track 1 vulnerability in Opensourcebms products. 1 is rated high or critical, and 1 has been exploited in real attacks. The most recent was published on February 24, 2019.
1vulnerabilities
0critical
1high
1exploited
8.8average CVSS score
Latest Opensourcebms vulnerabilities
- 8.8 High severity
ThinkPHP Remote Code Execution Exploited
ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.