Twothink · Twothink · CVE-2020-17952
Name of the Vulnerable Software and Affected Versions:
Twothink version 2.0
Description:
A remote code execution issue in the /library/think/App.php file of Twothink allows attackers to execute arbitrary PHP code.
Recommendations:
For Twothink version 2.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the /library/think/App.php file until a patch is available.