CVE-2021-29377

Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely. A .php file can be uploaded via admin.php/index/upload because app/common/service/UploadService.php mishandles fileExt...

Pear Admin Think Arbitrary File Upload (CVE-2021-29377)

An arbitrary file upload vulnerability exists in Pear Admin Think. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2021-29377

Pear Admin Think through 2.1.2 contains an arbitrary file upload vulnerability that enables remote code execution by uploading a .php file via admin.php/index/upload due to mishandling of fileExt in app/common/service/UploadService.php. This is documented across multiple sources (NVD entry CVE-20...