Unrated severityCISA KEVOSV Advisory· Published Dec 11, 2018· Updated Oct 21, 2025

CVE-2018-20062

Description

An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrated by the s=index/\think\Request/input&filter=phpinfo&data=1 query string.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nangge/NonecmsOSV2 versions
v1.1.0, v1.2.0, v1.3.0+ 1 more
- (no CPE)range: v1.1.0, v1.2.0, v1.3.0
- (no CPE)range: = V1.3

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/157218/ThinkPHP-5.0.23-Remote-Code-Execution.htmlmitrex_refsource_MISC
github.com/nangge/noneCms/issues/21mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.080
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.000