Directory traversal

ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter...

CVE-2020-25540

ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter...

CVE-2020-25540

ThinkAdmin v6 is affected by a directory traversal/local file inclusion vulnerability (CVE-2020-25540). An unauthorized attacker can read arbitrary files on the remote server via a crafted GET request (parameter encode). Connected references describe PoCs and public exploits, including reading /e...