Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/04 12:00 a.m.•9 views

CVE-2023-48965: Unrestricted Upload of File with Dangerous Type

An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file...

8.8CVSS7.7AI score0.00897EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/12/04 12:00 a.m.•10 views

PT-2023-31019

Name of the Vulnerable Software and Affected Versions ThinkAdmin version 6.1.53 Description An issue in the component /admin/api.plugs/script allows attackers to getshell via providing a crafted URL to download a malicious PHP file. Recommendations For ThinkAdmin version 6.1.53, as a temporary...

8.8CVSS5.7AI score0.00897EPSS
SaveExploits1References5
Rows per page
Query Builder