CVE-2024-33443

An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component...

CVE-2024-33443

The onethink content management framework (version v.1.1 ) is vulnerable to arbitrary code execution. A remote attacker can exploit the AddonsController.class.php component by sending a crafted script . The root cause is categorized as Improper Control of Generation of Code (CWE-94). To mitigate ...