CVE-2022-47945

ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_on=true). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

28.73% chance of exploitation in the next 30 days, 98th percentile

Nuclei

critical · CWE-22

Published

2022-12-23

Updated

2025-04-15

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47945.yaml

Exploit collections (1)

• CVE-2022-47945.yamlzan8in/afrog

Security advisories

• top-think/framework/compare/v6.0.13...v6.0.14
• https://tttang.com/archive/1865
• advisories/GHSA-p4qr-vq2g-22wp

References

• CVE Record
• NVD entry