ThinkAdmin Code Execution Vulnerability

2023-12-0800:00:00

China National Vulnerability Database

www.cnvd.org.cn

thinkadmin

vulnerability

arbitrary code execution

zip upload

thinkphp framework

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

22.9%

JSON

ThinkAdmin is a general purpose backend management system based on the ThinkPHP framework. A security vulnerability exists in ThinkAdmin version v6.1.53, which originates from allowing arbitrary file uploads. An attacker can exploit the vulnerability to execute arbitrary code via a specially crafted Zip file.