CVE-2022-47945

CRITICALNuclei

ThinkPHP Framework vulnerable to remote code execution

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2022-47945 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_on=true). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Apr 11, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 15, 2025 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

ThinkPHP

Browse thinkphp / ThinkPHP
VulnCheckVersion data not supplied

topthink/framework

Browse Packagist / topthink/framework
GitHub AdvisoryBefore 6.0.14 · Fixed in 6.0.14affected

Nuclei templates

1
ProjectDiscoveryCRITICALThinkphp Lang - Local File InclusionCVSS 9.8

ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_on=true). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php.

Impact

This vulnerability can lead to unauthorized access, data leakage, and remote code execution.

Remediation

Apply the latest security patches and updates provided by the Thinkphp framework.

WeaknessesCWE-22
Authorskagamigawa
Template tagscvecve2022thinkphplfivkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*
Shodan: title:"Thinkphp"
Shodan: http.title:"thinkphp"
Shodan: cpe:"cpe:2.3:a:thinkphp:thinkphp"
FOFA: header="think_lang"
FOFA: title="thinkphp"
Google: intitle:"thinkphp"
https://tttang.com/archive/1865/ https://nvd.nist.gov/vuln/detail/CVE-2022-47945 https://github.com/top-think/framework/compare/v6.0.13...v6.0.14 https://github.com/top-think/framework/commit/c4acb8b4001b98a0078eda25840d33e295a7f099 https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

5