Skip to content
Noroxi

opensourcebms records

1 published records for vendor opensourcebms.

Researcher profile

Entered KEV
1 · 100%
Weaponized
1 · 100%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
983 days

Records by year

  1. 19

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

1 records
  • ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app

    HighCVSS 8.8KEVWeaponizedEPSS 97%

    thinkphp · thinkphpFeb 24, 2019