ThinkPHP 5.0.1 - Remote Code Execution (thinkphp-501-rce)

[ehsandeep]

Nuclei Version:

latest

Template file:

vulnerabilities/thinkphp/thinkphp-501-rce.yaml

Command to reproduce:

This will match with any host that have phpinfo content in the response, but not necessarily rce as a result of payload, payload + matchers to need to improve to confirm the rce.

[EvergreenCartoons]

might be better for this one (have experienced this FP in the past) to use interactsh to confirm execution of code?

[princechaddha]

This issue has been fixed in this PR