{"vulnerability": "cve-2022-44289", "sightings": [{"uuid": "b37a1db8-9024-4022-a35f-aaf8f132dda8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44289", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3642", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1agetshell\n\u63cf\u8ff0\uff1aThinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell. CVE project by @Sn0wAlice\nURL\uff1ahttps://github.com/Live-Hack-CVE/CVE-2022-44289\n\n\u6807\u7b7e\uff1a#getshell", "creation_timestamp": "2022-12-28T02:40:14.000000Z"}, {"uuid": "47aa06f9-28ba-4614-a696-3c7f0afadf9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44289", "type": "seen", "source": "https://t.me/cibsecurity/54069", "content": "\u203c CVE-2022-44289 \u203c\n\nThinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-06T18:41:20.000000Z"}, {"uuid": "644e3e40-40fd-45c7-8b3a-5dc68dc2993c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44289", "type": "seen", "source": "https://t.me/hacking_Attack/187001", "content": "PHP may not have as many problems as people think.\nhttps://www.reddit.com/r/Pentesting/comments/1u2ahtj/php_may_not_have_as_many_problems_as_people_think/\n\nWe always thought PHP had many vulnerabilities, but that is not really true. Recently, I have been testing a website that uses ThinkPHP 5.0.24 and FastAdmin. I found the server IP address, subdomains, and some paths such as main, api, admin, and img. I checked:  File upload (CVE-2022-44289) Some serialized interfaces SQL injection testing on the login page with sqlmap Weak passwords on the login page CVEs: CVE-2024-7928, CVE-2022-47945, CVE-2021-23592 Nginx 1.26.1, no serious vulnerabilities found MySQL is installed, port 3306 is open  I am still testing:  PHP vulnerabilities (7.2, 7.3, 7.4, etc.)  Now I am confused. What should I do next?    submitted by    /u/Able_Statistician201  (https://www.reddit.com/user/Able_Statistician201) \n [link] (https://www.reddit.com/r/Pentesting/comments/1u2ahtj/php_may_not_have_as_many_problems_as_people_think/)   [comments] (https://www.reddit.com/r/Pentesting/comments/1u2ahtj/php_may_not_have_as_many_problems_as_people_think/)", "creation_timestamp": "2026-09-01T20:00:07.997212Z"}]}