Tag: lfi

All the articles with the tag "lfi".

• [CVE-2025-50706] From Local File Inclusion to Remote Code Execution in ThinkPHP 5.1

  5 Aug, 2025

  A flaw in ThinkPHP 5.1 lets unauthenticated attackers include arbitrary files, pivoting to full code execution on the web server. Because ThinkPHP backs many Chinese-language CMS and e-commerce platforms, the blast radius is wide.