CVE-2023-48965

2023-12-0400:00:00

mitre

www.cve.org

thinkadmin

getshell

crafted url

component

malicious php file

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

JSON

An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file.

References

github.com/1dreamGN/CVE/blob/main/ThinkAdmin%20Logical%20defect%20getshell.md