Open Source Background Management System vulnerabilities
1 known vulnerability in Open Source Background Management System from Opensourcebms. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
1exploited
8.8average CVSS score
Latest first
- 8.8 High severity
ThinkPHP Remote Code Execution Exploited
ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.