4 matches found
CVE-2024-33443
An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component...
CVE-2024-33443
An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component...
CVE-2024-33443: Improper Control of Generation of Code
An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component...
CVE-2024-33443
The onethink content management framework (version v.1.1 ) is vulnerable to arbitrary code execution. A remote attacker can exploit the AddonsController.class.php component by sending a crafted script . The root cause is categorized as Improper Control of Generation of Code (CWE-94). To mitigate ...