Lucene search
K

22 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:35 p.m.3 views

CVE-2021-29378

SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request to Crud.php...

8.8CVSS9AI score0.00081EPSS
Exploits1References1
NVD
NVD
added 2023/08/11 2:15 p.m.6 views

CVE-2021-29378

SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request to Crud.php...

8.8CVSS9.3AI score0.00081EPSS
Exploits1References1
OSV
OSV
added 2023/08/11 2:15 p.m.0 views

CVE-2021-29378

SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request to Crud.php...

8.8CVSS6.1AI score0.00081EPSS
Exploits1References1
Prion
Prion
added 2023/08/11 2:15 p.m.7 views

Sql injection

SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request to Crud.php...

6.5CVSS9.3AI score0.00081EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2023/08/11 12:0 a.m.36 views

CVE-2021-29378

CVE-2021-29378 affects the Pear Admin Think project, specifically version 2.1.2. The vulnerability is a SQL injection in theCrud.php endpoint triggered by a crafted GET request, which can lead to arbitrary code execution and privilege escalation. The provided documents do not specify a patched ve...

8.8CVSS9.2AI score0.00081EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/11 12:0 a.m.8 views

CVE-2021-29378

SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request to Crud.php...

8.9AI score0.00081EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/08/11 12:0 a.m.14 views

CVE-2021-29378

SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request to Crud.php...

9.5AI score0.00081EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/08/11 12:0 a.m.1 views

Pear Admin Think SQL Injection Vulnerability

Pear Admin Think is open source rapid development platform based on thinkphp6, with simple code generation features, you can quickly build your functional business. A security vulnerability exists in Pear Admin Think version 2.1.2, which stems from a vulnerability that allows an attacker to execu...

8.8CVSS7.9AI score0.00081EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/03/29 12:15 p.m.3 views

CVE-2022-23903

A Cross Site Scripting XSS vulnerability exists in pearadmin pear-admin-think =5.0.6, which allows a login account to access arbitrary functions and cause stored XSS through a fake User-Agent...

5.4CVSS6.2AI score0.00206EPSS
Exploits1References2
NVD
NVD
added 2022/03/29 12:15 p.m.7 views

CVE-2022-23903

A Cross Site Scripting XSS vulnerability exists in pearadmin pear-admin-think =5.0.6, which allows a login account to access arbitrary functions and cause stored XSS through a fake User-Agent...

5.4CVSS0.00206EPSS
Exploits1References1
OSV
OSV
added 2022/03/29 12:15 p.m.12 views

CVE-2022-23903

A Cross Site Scripting XSS vulnerability exists in pearadmin pear-admin-think =5.0.6, which allows a login account to access arbitrary functions and cause stored XSS through a fake User-Agent...

5.4CVSS5.2AI score
Exploits0References1
Prion
Prion
added 2022/03/29 12:15 p.m.11 views

Cross site scripting

A Cross Site Scripting XSS vulnerability exists in pearadmin pear-admin-think =5.0.6, which allows a login account to access arbitrary functions and cause stored XSS through a fake User-Agent...

3.5CVSS5.2AI score0.00206EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/03/29 11:55 a.m.56 views

CVE-2022-23903

The vulnerability is in pear-admin-Think (pear-admin-think)

5.4CVSS5.1AI score0.00206EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/03/29 11:55 a.m.8 views

CVE-2022-23903

A Cross Site Scripting XSS vulnerability exists in pearadmin pear-admin-think =5.0.6, which allows a login account to access arbitrary functions and cause stored XSS through a fake User-Agent...

5.3AI score0.00206EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/03/29 12:0 a.m.1 views

Pear Admin Think 跨站脚本漏洞

Pear Admin Think is a rapid development platform based on thinkphp6 that allows you to quickly build your functional business with simple code generation functionality. pear Admin Think 5.0.6 and prior versions contain a cross-site scripting vulnerability that stems from the program's lack of dat...

5.4CVSS5.5AI score0.00206EPSS
Exploits1References2
Check Point Advisories
Check Point Advisories
added 2021/10/10 12:0 a.m.2 views

Pear Admin Think Arbitrary File Upload (CVE-2021-29377)

An arbitrary file upload vulnerability exists in Pear Admin Think. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS9.4AI score0.00853EPSS
Exploits1
OSV
OSV
added 2021/08/12 10:15 p.m.0 views

CVE-2021-29377

Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely. A .php file can be uploaded via admin.php/index/upload because app/common/service/UploadService.php mishandles fileExt...

9.8CVSS6AI score
Exploits0References1
NVD
NVD
added 2021/08/12 10:15 p.m.11 views

CVE-2021-29377

Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely. A .php file can be uploaded via admin.php/index/upload because app/common/service/UploadService.php mishandles fileExt...

9.8CVSS0.00853EPSS
Exploits1References1
Prion
Prion
added 2021/08/12 10:15 p.m.9 views

Privilege escalation

Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely. A .php file can be uploaded via admin.php/index/upload because app/common/service/UploadService.php mishandles fileExt...

7.5CVSS9.7AI score0.00853EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/08/12 9:50 p.m.12 views

CVE-2021-29377

Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely. A .php file can be uploaded via admin.php/index/upload because app/common/service/UploadService.php mishandles fileExt...

10AI score0.00853EPSS
Exploits1References1
Rows per page
Query Builder