CNNVD-202507-1826 Information
Jul 14, 2025
cve
CNNVD ID
CNNVD-202507-1826
Related CVE
- CNNVD Published: 2025-07-14
Description (Chinese)
OneBase是Bigotry个人开发者的一个一款基于ThinkPHP5研发的开源免费基础架构。 OneBase 1.3.6及之前版本存在代码注入漏洞，该漏洞源于文件/tpl/think_exception.tpl中参数args的错误操作导致跨站脚本攻击。
Description (English)
OneBase is a free-of-charge infrastructure based on ThinkPHP5 developed by Bigotry Personal Developer. OneBase 1.3.6 and previous versions have code-injection holes, which stem from the error of the Args parameter in file/tpl/think exception.tpl resulting in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
Live Support
Published
2025-07-14
Last Modified
2026-02-24
References
https://vuldb.com/?id.316267 https://vuldb.com/?ctiid.316267 https://github.com/Hebing123/cve/issues/87 https://vuldb.com/?submit.607128 https://access.redhat.com/security/cve/cve-2025-7569
Share on: