5 matches found
CVE-2024-31615
ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php...
9.8CVSS6.6AI score0.00712EPSS
SaveExploits1References1
CVE-2024-31615
ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php...
6.9AI score0.00712EPSS
SaveExploits1References1
CVE-2024-31615
ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php...
6.8AI score0.00712EPSS
SaveExploits1References1
CVE-2024-31615: Unrestricted Upload of File with Dangerous Type
ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php...
9.8CVSS5.8AI score0.00712EPSS
SaveExploits1References2
CVE-2024-31615
The ThinkCMF content management system (version 6.0.9 ) is vulnerable to an unrestricted file upload flaw via the UeditorController.php component. This is caused by insufficient validation of file extensions during the upload process, which allows an attacker to upload files with dangerous types ...
9.8CVSS6.8AI score0.00712EPSS
SaveExploits1References1Affected Software1
20