PULSE
ES
FEED
ransomiah6477 reclama a middleby · US · Manufacturingransomiah6477 reclama a sunshine-mills · Agriculture and Food Productionransomakira reclama a Svd (Sun Valley Dairy) · US · Agriculture and Food Productionransomqilin reclama a Hocon Gas · NG · Energy & Utilitiesransomqilin reclama a HyperGen · US · Technologyransomqilin reclama a Chattanooga Shooting Supplies · US · Retail & E-Commerceransomqilin reclama a Brame Telecom · BR · Technologyransomiah6477 reclama a hensley · Otherransomvexy ransomware reclama a Enchanted Fine Jewellery · IN · Retail & E-Commerceransomiah6477 reclama a buckle · Retail & E-Commerceransomiah6477 reclama a camden-living · GB · Hospitalityransomemperador reclama a MPI LTDA · BR · Otherransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcareransomiah6477 reclama a middleby · US · Manufacturingransomiah6477 reclama a sunshine-mills · Agriculture and Food Productionransomakira reclama a Svd (Sun Valley Dairy) · US · Agriculture and Food Productionransomqilin reclama a Hocon Gas · NG · Energy & Utilitiesransomqilin reclama a HyperGen · US · Technologyransomqilin reclama a Chattanooga Shooting Supplies · US · Retail & E-Commerceransomqilin reclama a Brame Telecom · BR · Technologyransomiah6477 reclama a hensley · Otherransomvexy ransomware reclama a Enchanted Fine Jewellery · IN · Retail & E-Commerceransomiah6477 reclama a buckle · Retail & E-Commerceransomiah6477 reclama a camden-living · GB · Hospitalityransomemperador reclama a MPI LTDA · BR · Otherransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcare
← All CVEs
CVE Watch—

CVE-2019-9082

ThinkPHP Remote Code Execution Vulnerability

CVSS

—

No CVSS

EPSS

97.4%

p100

KEV

YES

Nov 3, 2021

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d
97.4%EPSS · 30 days97.4%
2026-09-162026-10-14
KEV catalog record

Product

ThinkPHP / ThinkPHP

Vulnerability

ThinkPHP Remote Code Execution Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

No

Summary description

ThinkPHP contains an unspecified vulnerability that allows for remote code execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-9082

Related CVEs

No related CVEs by CWE or product.