github_osv/GHSA-ch3r-vp46-8g22
Code injection in topthink/think
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code.
gitlab/packagist/topthink/think/CVE-2020-17952
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code.