{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-4+qual-2+sec-2","generated_at":"2026-11-13T23:37:07.062952Z","repo":{"ref":{"host":"github.com","owner":"SecWiki","name":"CMS-Hunter"},"default_branch":"master","clone_url":"https://github.com/SecWiki/CMS-Hunter.git","html_url":"https://github.com/SecWiki/CMS-Hunter","description":"CMS漏洞测试用例集合","stars":1764,"forks":511,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":9513,"primary_language":"PHP","license_spdx":"GPL-3.0","created_at":"2017-06-12T14:01:12Z","pushed_at":"2018-12-20T06:44:47Z","security_policy_url":null,"distribution":{"owner_created_at":"2015-03-09T01:57:31Z","owner_type":"Organization","release_assets":[]}},"commit_sha":"5ad0da9524b385045e7a4a627d2bb52906badfc5","profile":{"lines_by_language":{"PHP":75047,"Python":667,"C":343},"files_by_category":{"source":348,"binary":66,"docs":51,"other":47,"config":17,"test":5,"vendored":1,"oversized":1},"source_lines":75369,"test_lines":688},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":null},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":40.4,"confidence":0.9,"coverage":1.0,"label":"poor","breakdown":{"complexity":37.0,"duplication":16.9,"lint":85.6,"testing":20.5,"docs":65.0,"type_safety":40.0,"process":null},"summary":"Code quality is poor: test-to-source ratio 0.01, no CI test run detected; 33% of function code in complex or long functions; 30% duplicated lines. Weakest area: duplication."},"security":{"score":69.7,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":66.7,"dependencies":null,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is weak: 94 high-severity SAST findings. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no registry dependencies declared"},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":136.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":342.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2017-06":{"loc":91,"attributed_loc":0},"2017-07":{"loc":55,"attributed_loc":0},"2017-10":{"loc":0,"attributed_loc":0},"2018-01":{"loc":0,"attributed_loc":0},"2018-03":{"loc":0,"attributed_loc":0},"2018-05":{"loc":0,"attributed_loc":0},"2018-06":{"loc":158,"attributed_loc":0},"2018-07":{"loc":38,"attributed_loc":0},"2018-09":{"loc":0,"attributed_loc":0},"2018-12":{"loc":0,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":4.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":342.0,"pre_ai_era_burst_loc":0.0,"measured_loc":342.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":39.38785402672945,"median_loc_per_hour":39.38785402672945,"pr_timed_units":0.0,"excluded_import_loc":0.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":75369.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":144.0,"findings_high":94.0,"findings_medium":44.0,"findings_low":6.0,"weighted_findings":87.3,"scanned_lines":75369.0,"parse_errors":1.0},"findings":[{"rule_id":"opengrep/php.lang.security.phpinfo-use","severity":"high","message":"The 'phpinfo' function may reveal sensitive information about your environment. [confidence medium]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/Application/Runtime/Cache/Home/p.php","line":3,"fingerprint":"php.lang.security.phpinfo-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/Application/Runtime/Cache/Home/p.php:3"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/Application/Runtime/Temp/b068931cc450442b63f5b3d276ea4297.php","line":3,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/Application/Runtime/Temp/b068931cc450442b63f5b3d276ea4297.php:3"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php","line":1169,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php:1169"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/BrowserCheckBehavior.class.php","line":19,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/BrowserCheckBehavior.class.php:19"},{"rule_id":"opengrep/php.lang.security.file-inclusion","severity":"high","message":"Detected non-constant file inclusion. This can lead to local file inclusion (LFI) or remote file inclusion (RFI) if user input reaches this statement. LFI and RFI could lead to sensitive files being obtained by attackers. Instead, explicitly specify what to include. If that is not a viable solution, [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/ChromeShowPageTraceBehavior.class.php","line":71,"fingerprint":"php.lang.security.file-inclusion:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/ChromeShowPageTraceBehavior.class.php:71"},{"rule_id":"opengrep/php.lang.security.file-inclusion","severity":"high","message":"Detected non-constant file inclusion. This can lead to local file inclusion (LFI) or remote file inclusion (RFI) if user input reaches this statement. LFI and RFI could lead to sensitive files being obtained by attackers. Instead, explicitly specify what to include. If that is not a viable solution, [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/CronRunBehavior.class.php","line":44,"fingerprint":"php.lang.security.file-inclusion:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/CronRunBehavior.class.php:44"},{"rule_id":"opengrep/php.lang.security.file-inclusion","severity":"high","message":"Detected non-constant file inclusion. This can lead to local file inclusion (LFI) or remote file inclusion (RFI) if user input reaches this statement. LFI and RFI could lead to sensitive files being obtained by attackers. Instead, explicitly specify what to include. If that is not a viable solution, [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/FireShowPageTraceBehavior.class.php","line":67,"fingerprint":"php.lang.security.file-inclusion:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/FireShowPageTraceBehavior.class.php:67"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/FireShowPageTraceBehavior.class.php","line":1121,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/FireShowPageTraceBehavior.class.php:1121"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/ParseTemplateBehavior.class.php","line":28,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/ParseTemplateBehavior.class.php:28"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/ParseTemplateBehavior.class.php","line":60,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/ParseTemplateBehavior.class.php:60"},{"rule_id":"opengrep/php.lang.security.file-inclusion","severity":"high","message":"Detected non-constant file inclusion. This can lead to local file inclusion (LFI) or remote file inclusion (RFI) if user input reaches this statement. LFI and RFI could lead to sensitive files being obtained by attackers. Instead, explicitly specify what to include. If that is not a viable solution, [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/ShowPageTraceBehavior.class.php","line":52,"fingerprint":"php.lang.security.file-inclusion:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/ShowPageTraceBehavior.class.php:52"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/TokenBuildBehavior.class.php","line":43,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/TokenBuildBehavior.class.php:43"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Org/Util/Rbac.class.php","line":162,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Org/Util/Rbac.class.php:162"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Org/Util/String.class.php","line":20,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Org/Util/String.class.php:20"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Auth.class.php","line":203,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Auth.class.php:203"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/Db.class.php","line":91,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/Db.class.php:91"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/File.class.php","line":54,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/File.class.php:54"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/File.class.php","line":132,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/File.class.php:132"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/Shmop.class.php","line":167,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/Shmop.class.php:167"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Crypt/Driver/Base64.class.php","line":26,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Crypt/Driver/Base64.class.php:26"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Crypt/Driver/Base64.class.php","line":50,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Crypt/Driver/Base64.class.php:50"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Crypt/Driver/Crypt.class.php","line":30,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Crypt/Driver/Crypt.class.php:30"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Crypt/Driver/Crypt.class.php","line":71,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Crypt/Driver/Crypt.class.php:71"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Crypt/Driver/Think.class.php","line":26,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Crypt/Driver/Think.class.php:26"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Crypt/Driver/Think.class.php","line":52,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Crypt/Driver/Think.class.php:52"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Db.class.php","line":30,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Db.class.php:30"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model.class.php","line":855,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model.class.php:855"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model.class.php","line":877,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model.class.php:877"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model/AdvModel.class.php","line":572,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model/AdvModel.class.php:572"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Storage/Driver/Sae.class.php","line":122,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Storage/Driver/Sae.class.php:122"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Template.class.php","line":97,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Template.class.php:97"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload.class.php","line":165,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload.class.php:165"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload.class.php","line":166,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload.class.php:166"},{"rule_id":"opengrep/php.lang.security.curl-ssl-verifypeer-off","severity":"high","message":"SSL verification is disabled but should not be (currently CURLOPT_SSL_VERIFYPEER= false) [confidence medium]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Bcs/requestcore.class.php","line":496,"fingerprint":"php.lang.security.curl-ssl-verifypeer-off:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Bcs/requestcore.class.php:496"},{"rule_id":"opengrep/php.lang.security.ftp-use","severity":"high","message":"FTP allows for unencrypted file transfers. Consider using an encrypted alternative. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Ftp.class.php","line":61,"fingerprint":"php.lang.security.ftp-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Ftp.class.php:61"},{"rule_id":"opengrep/php.lang.security.ftp-use","severity":"high","message":"FTP allows for unencrypted file transfers. Consider using an encrypted alternative. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Ftp.class.php","line":143,"fingerprint":"php.lang.security.ftp-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Ftp.class.php:143"},{"rule_id":"opengrep/php.lang.security.ftp-use","severity":"high","message":"FTP allows for unencrypted file transfers. Consider using an encrypted alternative. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Ftp.class.php","line":160,"fingerprint":"php.lang.security.ftp-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Ftp.class.php:160"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Qiniu/QiniuStorage.class.php","line":74,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Qiniu/QiniuStorage.class.php:74"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Upyun.class.php","line":41,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Upyun.class.php:41"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Upyun.class.php","line":204,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Upyun.class.php:204"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Verify.class.php","line":288,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Verify.class.php:288"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Verify.class.php","line":289,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Verify.class.php:289"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Verify.class.php","line":290,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Verify.class.php:290"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Boris/EvalWorker.php","line":133,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Boris/EvalWorker.php:133"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Boris/EvalWorker.php","line":180,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Boris/EvalWorker.php:180"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/EaseTemplate/template.core.php","line":248,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/EaseTemplate/template.core.php:248"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/EaseTemplate/template.core.php","line":283,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/EaseTemplate/template.core.php:283"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/EaseTemplate/template.core.php","line":574,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/EaseTemplate/template.core.php:574"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/EaseTemplate/template.core.php","line":747,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/EaseTemplate/template.core.php:747"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Hprose/HproseClassManager.php","line":48,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Hprose/HproseClassManager.php:48"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/SmartTemplate/class.smarttemplate.php","line":343,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/SmartTemplate/class.smarttemplate.php:343"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/Smarty.class.php","line":1186,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/Smarty.class.php:1186"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/SmartyBC.class.php","line":456,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/SmartyBC.class.php:456"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.math.php","line":70,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.math.php:70"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/shared.literal_compiler_param.php","line":31,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/shared.literal_compiler_param.php:31"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_cacheresource_custom.php","line":84,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_cacheresource_custom.php:84"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_cacheresource_custom.php","line":134,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_cacheresource_custom.php:134"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_cacheresource_keyvaluestore.php","line":101,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_cacheresource_keyvaluestore.php:101"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_cacheresource_keyvaluestore.php","line":187,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_cacheresource_keyvaluestore.php:187"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_cacheresource_file.php","line":61,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_cacheresource_file.php:61"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_cacheresource_file.php","line":163,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_cacheresource_file.php:163"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_extends.php","line":60,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_extends.php:60"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_extends.php","line":65,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_extends.php:65"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_extends.php","line":67,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_extends.php:67"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_function.php","line":69,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_function.php:69"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_include.php","line":131,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_include.php:131"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_include_php.php","line":61,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_include_php.php:61"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_insert.php","line":63,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_insert.php:63"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_insert.php","line":75,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_compile_insert.php:75"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_config.php","line":107,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_config.php:107"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_function_call_handler.php","line":48,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_function_call_handler.php:48"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_resource_eval.php","line":32,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_resource_eval.php:32"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_resource_extends.php","line":46,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_resource_extends.php:46"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_resource_file.php","line":36,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_resource_file.php:36"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_resource_php.php","line":45,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_resource_php.php:45"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_resource_registered.php","line":32,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_resource_registered.php:32"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_resource_string.php","line":32,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_resource_string.php:32"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_template.php","line":227,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_template.php:227"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_template.php","line":255,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_template.php:255"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_template.php","line":639,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_template.php:639"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_templatebase.php","line":147,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_templatebase.php:147"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_templatebase.php","line":246,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_templatebase.php:246"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_utility.php","line":201,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_utility.php:201"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_resource_custom.php","line":52,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_resource_custom.php:52"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/TemplateLite/class.template.php","line":745,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/TemplateLite/class.template.php:745"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/TemplateLite/internal/template.config_loader.php","line":64,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/TemplateLite/internal/template.config_loader.php:64"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/compat.php","line":207,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/compat.php:207"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/compat.php","line":210,"fingerprint":"php.lang.security.eval-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/compat.php:210"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_client.php","line":535,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_client.php:535"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_server.php","line":406,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_server.php:406"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Api/functions.php","line":799,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Api/functions.php:799"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Lite/View.class.php","line":125,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Lite/View.class.php:125"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Lite/View.class.php","line":164,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Lite/View.class.php:164"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Lite/functions.php","line":1104,"fingerprint":"php.lang.security.weak-crypto:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Lite/functions.php:1104"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php","line":1148,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php:1148"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/CronRunBehavior.class.php","line":63,"fingerprint":"php.lang.security.unlink-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/CronRunBehavior.class.php:63"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Auth.class.php","line":115,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Auth.class.php:115"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/Apachenote.class.php","line":59,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/Apachenote.class.php:59"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/Db.class.php","line":66,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/Db.class.php:66"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/File.class.php","line":88,"fingerprint":"php.lang.security.unlink-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/File.class.php:88"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/File.class.php","line":104,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/File.class.php:104"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/File.class.php","line":157,"fingerprint":"php.lang.security.unlink-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/File.class.php:157"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/File.class.php","line":174,"fingerprint":"php.lang.security.unlink-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/File.class.php:174"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/Shmop.class.php","line":52,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/Shmop.class.php:52"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/Sqlite.class.php","line":60,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Cache/Driver/Sqlite.class.php:60"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model/AdvModel.class.php","line":470,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model/AdvModel.class.php:470"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model/AdvModel.class.php","line":487,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model/AdvModel.class.php:487"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Storage/Driver/File.class.php","line":101,"fingerprint":"php.lang.security.unlink-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Storage/Driver/File.class.php:101"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Bcs/bcs.class.php","line":954,"fingerprint":"php.lang.security.unlink-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Upload/Driver/Bcs/bcs.class.php:954"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/EaseTemplate/template.core.php","line":918,"fingerprint":"php.lang.security.unlink-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/EaseTemplate/template.core.php:918"},{"rule_id":"opengrep/php.lang.security.php-permissive-cors","severity":"medium","message":"Access-Control-Allow-Origin response header is set to \"*\". This will disable CORS Same Origin Policy restrictions. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Hprose/HproseHttpServer.php","line":117,"fingerprint":"php.lang.security.php-permissive-cors:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Hprose/HproseHttpServer.php:117"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/SmartTemplate/class.smarttemplate.php","line":344,"fingerprint":"php.lang.security.injection.tainted-filename:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/SmartTemplate/class.smarttemplate.php:344"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/SmartTemplate/class.smarttemplate.php","line":346,"fingerprint":"php.lang.security.injection.tainted-filename:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/SmartTemplate/class.smarttemplate.php:346"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/SmartTemplate/class.smarttemplate.php","line":348,"fingerprint":"php.lang.security.injection.tainted-filename:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/SmartTemplate/class.smarttemplate.php:348"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.html_image.php","line":98,"fingerprint":"php.lang.security.injection.tainted-filename:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.html_image.php:98"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.html_image.php","line":99,"fingerprint":"php.lang.security.injection.tainted-filename:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.html_image.php:99"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.html_image.php","line":102,"fingerprint":"php.lang.security.injection.tainted-filename:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.html_image.php:102"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_cacheresource_file.php","line":214,"fingerprint":"php.lang.security.unlink-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_cacheresource_file.php:214"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_cacheresource_file.php","line":260,"fingerprint":"php.lang.security.unlink-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_cacheresource_file.php:260"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_utility.php","line":261,"fingerprint":"php.lang.security.unlink-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_utility.php:261"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_write_file.php","line":49,"fingerprint":"php.lang.security.unlink-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_write_file.php:49"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/TemplateLite/class.template.php","line":567,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/TemplateLite/class.template.php:567"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/TemplateLite/class.template.php","line":625,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/TemplateLite/class.template.php:625"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/TemplateLite/internal/template.destroy_dir.php","line":34,"fingerprint":"php.lang.security.unlink-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/TemplateLite/internal/template.destroy_dir.php:34"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/TemplateLite/internal/template.destroy_dir.php","line":52,"fingerprint":"php.lang.security.unlink-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/TemplateLite/internal/template.destroy_dir.php:52"},{"rule_id":"opengrep/php.lang.security.injection.tainted-callable","severity":"medium","message":"Callable based on user input risks remote code execution. [confidence medium]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/jsonRPC/jsonRPCServer.php","line":54,"fingerprint":"php.lang.security.injection.tainted-callable:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/jsonRPC/jsonRPCServer.php:54"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/dhparams.php","line":61,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/dhparams.php:61"},{"rule_id":"opengrep/c.lang.security.insecure-use-memset","severity":"medium","message":"When handling sensitive information in a buffer, it's important to ensure  that the data is securely erased before the buffer is deleted or reused.  While `memset()` is commonly used for this purpose, it can leave sensitive  information behind due to compiler optimizations or other factors.  To avoi [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/pecl/xxtea/php_xxtea.c","line":70,"fingerprint":"c.lang.security.insecure-use-memset:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/pecl/xxtea/php_xxtea.c:70"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_client.php","line":294,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_client.php:294"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_client.php","line":299,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_client.php:299"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_client.php","line":526,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_client.php:526"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_server.php","line":297,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_server.php:297"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_server.php","line":329,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_server.php:329"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_server.php","line":343,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_server.php:343"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_server.php","line":376,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/phpRPC/phprpc_server.php:376"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Api/functions.php","line":778,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Api/functions.php:778"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Lite/functions.php","line":1083,"fingerprint":"php.lang.security.unserialize-use:ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Lite/functions.php:1083"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"ThinkPHP/ThinkPHP_5.X_远程代码执行漏洞/thinkphp_5.0.22_with_extend/public/router.php","line":13,"fingerprint":"php.lang.security.injection.tainted-filename:ThinkPHP/ThinkPHP_5.X_远程代码执行漏洞/thinkphp_5.0.22_with_extend/public/router.php:13"},{"rule_id":"opengrep/python.lang.security.audit.insecure-transport.requests.request-with-http","severity":"low","message":"Detected a request using 'http://'. This request will be unencrypted, and attackers could listen into traffic on the network and be able to obtain sensitive information. Use 'https://' instead. [confidence medium]","path":"WordPress/WordPress_4.4_SSRF/poc.py","line":20,"fingerprint":"python.lang.security.audit.insecure-transport.requests.request-with-http:WordPress/WordPress_4.4_SSRF/poc.py:20"},{"rule_id":"opengrep/python.lang.security.audit.insecure-transport.requests.request-with-http","severity":"low","message":"Detected a request using 'http://'. This request will be unencrypted, and attackers could listen into traffic on the network and be able to obtain sensitive information. Use 'https://' instead. [confidence medium]","path":"WordPress/WordPress_4.4_SSRF/poc.py","line":50,"fingerprint":"python.lang.security.audit.insecure-transport.requests.request-with-http:WordPress/WordPress_4.4_SSRF/poc.py:50"},{"rule_id":"opengrep/python.lang.security.audit.insecure-transport.requests.request-with-http","severity":"low","message":"Detected a request using 'http://'. This request will be unencrypted, and attackers could listen into traffic on the network and be able to obtain sensitive information. Use 'https://' instead. [confidence medium]","path":"WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py","line":16,"fingerprint":"python.lang.security.audit.insecure-transport.requests.request-with-http:WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py:16"},{"rule_id":"opengrep/python.lang.security.audit.insecure-transport.requests.request-with-http","severity":"low","message":"Detected a request using 'http://'. This request will be unencrypted, and attackers could listen into traffic on the network and be able to obtain sensitive information. Use 'https://' instead. [confidence medium]","path":"WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py","line":22,"fingerprint":"python.lang.security.audit.insecure-transport.requests.request-with-http:WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py:22"},{"rule_id":"opengrep/python.lang.security.audit.insecure-transport.requests.request-with-http","severity":"low","message":"Detected a request using 'http://'. This request will be unencrypted, and attackers could listen into traffic on the network and be able to obtain sensitive information. Use 'https://' instead. [confidence medium]","path":"WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py","line":23,"fingerprint":"python.lang.security.audit.insecure-transport.requests.request-with-http:WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py:23"},{"rule_id":"opengrep/python.lang.security.audit.insecure-transport.requests.request-with-http","severity":"low","message":"Detected a request using 'http://'. This request will be unencrypted, and attackers could listen into traffic on the network and be able to obtain sensitive information. Use 'https://' instead. [confidence medium]","path":"WordPress/WordPress_4.7_Info_Disclosure/poc.py","line":19,"fingerprint":"python.lang.security.audit.insecure-transport.requests.request-with-http:WordPress/WordPress_4.7_Info_Disclosure/poc.py:19"}],"evidence":[],"data":{"rulesets":["php","python","c"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":0.0,"signed_commit_share":0.4485,"unpinned_manifests":3.0},"findings":[],"evidence":[{"kind":"posture","description":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/spyc/composer.json has no lockfile alongside it (unpinned dependencies)","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/spyc/composer.json","url":null,"weight":0.3},{"kind":"posture","description":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/composer.json has no lockfile alongside it (unpinned dependencies)","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/composer.json","url":null,"weight":0.3},{"kind":"posture","description":"ThinkPHP/ThinkPHP_5.X_远程代码执行漏洞/thinkphp_5.0.22_with_extend/composer.json has no lockfile alongside it (unpinned dependencies)","ref":"ThinkPHP/ThinkPHP_5.X_远程代码执行漏洞/thinkphp_5.0.22_with_extend/composer.json","url":null,"weight":0.3}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":2074.0,"function_nloc":32774.0,"mean_ccn":4.59,"p90_ccn":11.0,"complex_functions":110.0,"long_functions":24.0,"many_param_functions":0.0,"risky_nloc_share":0.3316},"findings":[],"evidence":[{"kind":"complex-function","description":"smarty_function_html_select_time in ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.html_select_time.php: complexity 133, 282 lines","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.html_select_time.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.html_select_time.php#L34","weight":1.0},{"kind":"complex-function","description":"smarty_function_html_select_date in ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.html_select_date.php: complexity 126, 280 lines","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.html_select_date.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.html_select_date.php#L54","weight":1.0},{"kind":"complex-function","description":"FirePHP::fb in ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/FireShowPageTraceBehavior.class.php: complexity 120, 264 lines","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/FireShowPageTraceBehavior.class.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/FireShowPageTraceBehavior.class.php#L1032","weight":1.0},{"kind":"complex-function","description":"Smarty_Internal_Utility::testInstall in ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_utility.php: complexity 88, 467 lines","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_utility.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/sysplugins/smarty_internal_utility.php#L295","weight":1.0},{"kind":"complex-function","description":"Dispatcher::dispatch in ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Dispatcher.class.php: complexity 76, 177 lines","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Dispatcher.class.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Dispatcher.class.php#L23","weight":1.0},{"kind":"complex-function","description":"Dispatcher::dispatch in ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Lite/Dispatcher.class.php: complexity 59, 149 lines","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Lite/Dispatcher.class.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Lite/Dispatcher.class.php#L23","weight":0.9833333333333333},{"kind":"complex-function","description":"smarty_function_fetch in ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.fetch.php: complexity 55, 177 lines","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.fetch.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Vendor/Smarty/plugins/function.fetch.php#L23","weight":0.9166666666666666},{"kind":"complex-function","description":"Dispatcher::dispatch in ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Api/Dispatcher.class.php: complexity 54, 131 lines","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Api/Dispatcher.class.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Api/Dispatcher.class.php#L23","weight":0.9},{"kind":"complex-function","description":"RelationModel::opRelation in ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model/RelationModel.class.php: complexity 47, 128 lines","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model/RelationModel.class.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model/RelationModel.class.php#L247","weight":0.7833333333333333},{"kind":"complex-function","description":"RelationModel::getRelation in ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model/RelationModel.class.php: complexity 42, 105 lines","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model/RelationModel.class.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Model/RelationModel.class.php#L127","weight":0.7}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":52830.0,"duplicated_lines":15657.0,"duplicated_share":0.2964,"files":348.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: PHPCMS/PHPCMS_v9.6.1_任意文件下载/poc.py:13 and PHPCMS/PHPCMS_v9.6.2_任意文件下载/poc.py:23","ref":"PHPCMS/PHPCMS_v9.6.1_任意文件下载/poc.py","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/PHPCMS/PHPCMS_v9.6.1_任意文件下载/poc.py#L13","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php:1 and ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Conf/convention.php:1","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php:6 and ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Lite/functions.php:6","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php#L6","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php:17 and ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Api/functions.php:17","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php#L17","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php:1482 and ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Org/Net/Http.class.php:214","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php#L1482","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php:1492 and ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Controller/RestController.class.php:138","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Common/functions.php#L1492","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Conf/convention.php:6 and ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Mode/Lite/convention.php:6","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Conf/convention.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Conf/convention.php#L6","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/AgentCheckBehavior.class.php:1 and ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/BorisBehavior.class.php:1","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/AgentCheckBehavior.class.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/AgentCheckBehavior.class.php#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/CheckActionRouteBehavior.class.php:1 and ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/CheckLangBehavior.class.php:1","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/CheckActionRouteBehavior.class.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/CheckActionRouteBehavior.class.php#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/CheckActionRouteBehavior.class.php:98 and ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Think/Route.class.php:164","ref":"ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/CheckActionRouteBehavior.class.php","url":"https://github.com/SecWiki/CMS-Hunter/blob/5ad0da9524b385045e7a4a627d2bb52906badfc5/ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷/tp3.2.3/ThinkPHP/Library/Behavior/CheckActionRouteBehavior.class.php#L98","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":39.0,"weighted_findings":47.0,"scanned_lines":75369.0,"category:best-practice":38.0,"category:correctness":1.0},"findings":[{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"WebLogic/CVE-2018-2628/poc.py","line":17,"fingerprint":"python.lang.best-practice.arbitrary-sleep:WebLogic/CVE-2018-2628/poc.py:17"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"WebLogic/CVE-2018-2628/poc.py","line":28,"fingerprint":"python.lang.best-practice.arbitrary-sleep:WebLogic/CVE-2018-2628/poc.py:28"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"WebLogic/CVE-2018-2628/poc.py","line":38,"fingerprint":"python.lang.best-practice.arbitrary-sleep:WebLogic/CVE-2018-2628/poc.py:38"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"WebLogic/CVE-2018-2628/poc.py","line":44,"fingerprint":"python.lang.best-practice.arbitrary-sleep:WebLogic/CVE-2018-2628/poc.py:44"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"FineCMS/FineCMS最新版5.0.8两处getshell/finecms-5.0.8-getshell.py","line":9,"fingerprint":"python.requests.best-practice.use-raise-for-status:FineCMS/FineCMS最新版5.0.8两处getshell/finecms-5.0.8-getshell.py:9"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"FineCMS/FineCMS最新版5.0.8两处getshell/finecms-5.0.8-getshell.py","line":10,"fingerprint":"python.requests.best-practice.use-raise-for-status:FineCMS/FineCMS最新版5.0.8两处getshell/finecms-5.0.8-getshell.py:10"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"Joomla/Joomla_3.4.4-3.6.3_未授权创建特权用户(CVE-2016-8869)/poc.py","line":25,"fingerprint":"python.requests.best-practice.use-timeout:Joomla/Joomla_3.4.4-3.6.3_未授权创建特权用户(CVE-2016-8869)/poc.py:25"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"Joomla/Joomla_3.4.4-3.6.3_未授权创建特权用户(CVE-2016-8869)/poc.py","line":45,"fingerprint":"python.requests.best-practice.use-timeout:Joomla/Joomla_3.4.4-3.6.3_未授权创建特权用户(CVE-2016-8869)/poc.py:45"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"Joomla/Joomla_3.7.0_SQL注入(CVE-2017-8917)/poc.py","line":9,"fingerprint":"python.requests.best-practice.use-raise-for-status:Joomla/Joomla_3.7.0_SQL注入(CVE-2017-8917)/poc.py:9"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"Joomla/Joomla_3.7.0_SQL注入(CVE-2017-8917)/poc.py","line":9,"fingerprint":"python.requests.best-practice.use-timeout:Joomla/Joomla_3.7.0_SQL注入(CVE-2017-8917)/poc.py:9"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"PHPCMS/PHPCMS_v9.6.0_SQL注入/poc.py","line":26,"fingerprint":"python.requests.best-practice.use-raise-for-status:PHPCMS/PHPCMS_v9.6.0_SQL注入/poc.py:26"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"PHPCMS/PHPCMS_v9.6.0_SQL注入/poc.py","line":40,"fingerprint":"python.requests.best-practice.use-raise-for-status:PHPCMS/PHPCMS_v9.6.0_SQL注入/poc.py:40"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"PHPCMS/PHPCMS_v9.6.0_SQL注入/poc.py","line":49,"fingerprint":"python.requests.best-practice.use-raise-for-status:PHPCMS/PHPCMS_v9.6.0_SQL注入/poc.py:49"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"PHPCMS/PHPCMS_v9.6.0_任意文件上传/poc.py","line":17,"fingerprint":"python.requests.best-practice.use-raise-for-status:PHPCMS/PHPCMS_v9.6.0_任意文件上传/poc.py:17"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"PHPCMS/PHPCMS_v9.6.0_任意文件上传/poc.py","line":17,"fingerprint":"python.requests.best-practice.use-timeout:PHPCMS/PHPCMS_v9.6.0_任意文件上传/poc.py:17"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"PHPCMS/PHPCMS_v9.6.1_任意文件下载/poc.py","line":15,"fingerprint":"python.requests.best-practice.use-timeout:PHPCMS/PHPCMS_v9.6.1_任意文件下载/poc.py:15"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"PHPCMS/PHPCMS_v9.6.1_任意文件下载/poc.py","line":25,"fingerprint":"python.requests.best-practice.use-timeout:PHPCMS/PHPCMS_v9.6.1_任意文件下载/poc.py:25"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"PHPCMS/PHPCMS_v9.6.1_任意文件下载/poc.py","line":33,"fingerprint":"python.requests.best-practice.use-timeout:PHPCMS/PHPCMS_v9.6.1_任意文件下载/poc.py:33"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"PHPCMS/PHPCMS_v9.6.2_任意文件下载/poc.py","line":13,"fingerprint":"python.requests.best-practice.use-timeout:PHPCMS/PHPCMS_v9.6.2_任意文件下载/poc.py:13"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"PHPCMS/PHPCMS_v9.6.2_任意文件下载/poc.py","line":25,"fingerprint":"python.requests.best-practice.use-timeout:PHPCMS/PHPCMS_v9.6.2_任意文件下载/poc.py:25"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"PHPCMS/PHPCMS_v9.6.2_任意文件下载/poc.py","line":38,"fingerprint":"python.requests.best-practice.use-timeout:PHPCMS/PHPCMS_v9.6.2_任意文件下载/poc.py:38"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"PHPCMS/PHPCMS_v9.6.2_任意文件下载/poc.py","line":46,"fingerprint":"python.requests.best-practice.use-timeout:PHPCMS/PHPCMS_v9.6.2_任意文件下载/poc.py:46"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"PHPCMS/PHPCMS_v9.6.2_任意文件下载/poc.py","line":55,"fingerprint":"python.requests.best-practice.use-timeout:PHPCMS/PHPCMS_v9.6.2_任意文件下载/poc.py:55"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"Struts/S2-048(CVE-2017-9791)/poc.py","line":43,"fingerprint":"python.requests.best-practice.use-raise-for-status:Struts/S2-048(CVE-2017-9791)/poc.py:43"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"Struts/S2-048(CVE-2017-9791)/poc.py","line":43,"fingerprint":"python.requests.best-practice.use-timeout:Struts/S2-048(CVE-2017-9791)/poc.py:43"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"ThinkPHP/ThinkPHP_5.X_远程代码执行漏洞/Thinkphp_check.py","line":16,"fingerprint":"python.requests.best-practice.use-timeout:ThinkPHP/ThinkPHP_5.X_远程代码执行漏洞/Thinkphp_check.py:16"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"ThinkPHP/ThinkPHP_5.X_远程代码执行漏洞/Thinkphp_check.py","line":30,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:ThinkPHP/ThinkPHP_5.X_远程代码执行漏洞/Thinkphp_check.py:30"},{"rule_id":"opengrep/python.lang.correctness.use-sys-exit","severity":"medium","message":"Detected use of `exit`. Use `sys.exit` over the python shell `exit` built-in. `exit` is a helper for the interactive shell and may not be available on all Python implementations.","path":"WebLogic/CVE-2018-2628/poc.py","line":74,"fingerprint":"python.lang.correctness.use-sys-exit:WebLogic/CVE-2018-2628/poc.py:74"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"WordPress/WordPress_4.4_SSRF/poc.py","line":20,"fingerprint":"python.requests.best-practice.use-raise-for-status:WordPress/WordPress_4.4_SSRF/poc.py:20"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"WordPress/WordPress_4.4_SSRF/poc.py","line":20,"fingerprint":"python.requests.best-practice.use-timeout:WordPress/WordPress_4.4_SSRF/poc.py:20"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"WordPress/WordPress_4.4_SSRF/poc.py","line":50,"fingerprint":"python.requests.best-practice.use-raise-for-status:WordPress/WordPress_4.4_SSRF/poc.py:50"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py","line":16,"fingerprint":"python.requests.best-practice.use-raise-for-status:WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py:16"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py","line":16,"fingerprint":"python.requests.best-practice.use-timeout:WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py:16"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py","line":22,"fingerprint":"python.requests.best-practice.use-raise-for-status:WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py:22"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py","line":22,"fingerprint":"python.requests.best-practice.use-timeout:WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py:22"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py","line":23,"fingerprint":"python.requests.best-practice.use-raise-for-status:WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py:23"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py","line":23,"fingerprint":"python.requests.best-practice.use-timeout:WordPress/WordPress_4.7.0-4.7.1_未授权内容注入/poc.py:23"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"WordPress/WordPress_4.7_Info_Disclosure/poc.py","line":19,"fingerprint":"python.requests.best-practice.use-raise-for-status:WordPress/WordPress_4.7_Info_Disclosure/poc.py:19"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"WordPress/WordPress_4.7_Info_Disclosure/poc.py","line":19,"fingerprint":"python.requests.best-practice.use-timeout:WordPress/WordPress_4.7_Info_Disclosure/poc.py:19"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.0183,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.0,"test_lines":688.0,"source_lines":75369.0,"test_ratio":0.0091,"ci_files":0.0,"cochange_share":0.0,"cochange_commits":7.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":63.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":1.0,"escapes":0.0,"escapes_per_kloc":0.0},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}