CVE-2023-48965

An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file...

CVE-2023-48965

ThinkAdmin v6.1.53 contains an issue in the component /admin/api.plugs/script that allows an attacker to obtain a shell by requesting a crafted URL which downloads a malicious PHP file. Public sources in the connected records confirm the vulnerability is tied to ThinkAdmin v6.1.53, with the NVD e...