CVE-2024-31615: Thinkcmf unrestricted file upload vulnerability

Thinkcmf · Thinkcmf

ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php.

9.8 CVSS 3.1 Critical EPSS 0.71% · top 48.3% CWE-434 · Unrestricted file upload

9.8CVSS 3.1 base score

0.71%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Thinkcmf Thinkcmf

References

Link	Tags
https://github.com/huajiuqi/bug/blob/main/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md	ExploitThird Party Advisory
https://github.com/huajiuqi/bug/blob/main/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md	ExploitThird Party Advisory

Track CVE-2024-31615 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-20601Thinkcmf code injection vulnerabilityAn issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.EPSS 7.6%22 Dec 2021 9.8CVE-2019-6713Thinkcmf code injection vulnerabilityapp\admin\controller\RouteController.php in ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code by using vectors involving port…EPSS 2.4%23 Jan 2019 8.8CVE-2022-40489Thinkcmf cross-site request forgery vulnerabilityThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into ad…EPSS 0.35%1 Dec 2022 8.8CVE-2019-7580Thinkcmf code injection vulnerabilityThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal/admin_category/addpost.html alias parameter because the mish…EPSS 9.9%7 Feb 2019 8.8CVE-2018-19898Thinkcmf sql injection vulnerabilityThinkCMF X2.2.2 has SQL Injection via the method edit_post in ArticleController.class.php and is exploitable by normal authenticated users via the po…EPSS 1.4%6 Dec 2018 7.2CVE-2018-19894Thinkcmf sql injection vulnerabilityThinkCMF X2.2.2 has SQL Injection via the functions check() and delete() in CommentadminController.class.php and is exploitable with the manager priv…EPSS 1.3%6 Dec 2018 7.2CVE-2018-19895Thinkcmf sql injection vulnerabilityThinkCMF X2.2.2 has SQL Injection via the function edit_post() in NavController.class.php and is exploitable with the manager privilege via the paren…EPSS 1.3%6 Dec 2018 7.2CVE-2018-19896Thinkcmf sql injection vulnerabilityThinkCMF X2.2.2 has SQL Injection via the function delete() in SlideController.class.php and is exploitable with the manager privilege via the ids[] …EPSS 1.3%6 Dec 2018

Source: NIST National Vulnerability Database (record CVE-2024-31615), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.