Design/Logic Flaw

2023-12-0416:15:00

PRIOn knowledge base

www.prio-n.com

component vulnerability

admin api flaw

remote code execution

malicious php file

nvd

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.3%

JSON

An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file.

CPENameOperatorVersion
thinkadmineq6.1.53

CPE	Name	Operator	Version
	thinkadmin	eq	6.1.53

References

github.com/1dreamGN/CVE/blob/main/ThinkAdmin%20Logical%20defect%20getshell.md