Threat actorhigh

Chinese threat actor exploits old ThinkPHP flaws since Oct. 2023

Security Affairsby @securityaffairsJun 7, 2024 · 07:38 UTC (Jun 7, 2024)3 min read10 · 5 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-20062 CVE-2019-9082

Tags: cve-2018-20062 cve-2019-9082 threat-actor

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-20062	Unauthenticated Remote Code Execution in ThinkPHP-based noneCms 1.3	9.8	100%	KEVPoC ×2	Dec 11, 2018 KEV Nov 3, 2021
CVE-2019-9082	Unauthenticated RCE in ThinkPHP < 3.2.4 (Open Source BMS, ZzzCMS zzzphp)	8.8	97%	KEVPoC ×3	Feb 24, 2019 KEV Nov 3, 2021

From the original article

3 min read at securityaffairs.com

Akamai observed a Chinese-speaking group exploiting two flaws, tracked as CVE-2018-20062 and CVE-2019-9082, in ThinkPHP applications. Akamai researchers observed a Chinese threat actor exploiting two old remote code execution vulnerabilities, tracked as CVE-2018-20062 and CVE-2019-9082 , in ThinkPHP.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.