136 matches found
CVE-2020-25540
ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter...
CVE-2020-25540
ThinkAdmin v6 is affected by a directory traversal vulnerability that allows an unauthorized attacker to read arbitrary files on a remote server. The vulnerability is exploited via a GET request using an encoded parameter . This flaw can lead to unauthorized access to sensitive files, potential r...
PT-2020-16108 · Thinkadmin · Thinkadmin
Name of the Vulnerable Software and Affected Versions: ThinkAdmin version 6 Description: The issue allows an unauthorized attacker to read arbitrary files on a remote server via a GET request by manipulating the encode parameter. Recommendations: For ThinkAdmin version 6, update to a version that...
CVE-2020-25540: Improper Limitation of a Pathname to a Restricted Directory
ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter...
CVE-2019-11018
application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change...
CVE-2019-11018
application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change...
Default credentials
application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change...
CVE-2019-11018
application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change...
CVE-2019-11018
ThinkAdmin V4.0 contains a vulnerability in the file application/admin/controller/User.php where administrator cookie-based credentials remain valid after a password change. The affected software/version is ThinkAdmin 4.0; root cause is improper invalidation of existing login cookies upon passwor...
CVE-2019-11018: Improper Authentication
application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change...
PT-2019-12140 · Thinkadmin · Thinkadmin
Name of the Vulnerable Software and Affected Versions: ThinkAdmin version 4.0 Description: The issue concerns the applicationadmincontrollerUser.php file in ThinkAdmin V4.0, where it fails to prevent the continued use of an administrator's cookie-based credentials after a password change. This...
ThinkAdmin (page.php) SQL Injection Vulnerability
No description provided by source. ========================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : ThinkAdmin .:. Script Download: http://www.thinkadmin.net/ .:. Bug Type : Sq...
ThinkAdmin SQL Injection
ThinkAdmin page.php Sql Injection Vulnerability ========================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : ThinkAdmin .:. Script Download: http://www.thinkadmin.net/ .:...
ThinkAdmin (page.php) Sql Injection Vulnerability
Exploit for unknown platform in category web applications ================================================= ThinkAdmin page.php Sql Injection Vulnerability ================================================= .:. Script : ThinkAdmin .:. Script Download: http://www.thinkadmin.net/ .:. Bug Type : Sql...
ThinkAdmin - page.php SQL Injection
ThinkAdmin - page.php SQL Injection ========================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : ThinkAdmin .:. Script Download: http://www.thinkadmin.net/ .:. Bug Type : S...
ThinkAdmin - 'page.php' SQL Injection
========================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : ThinkAdmin .:. Script Download: http://www.thinkadmin.net/ .:. Bug Type : Sql InjectionMysql .:. Dork : Powered...