139 matches found
cve-2020-25540
ThinkAdmin Unauthorized Directory Listing/Arbitrary File Read cve-2020-25540 Usage python3 cve-2020-25540.py url...
CVE-2020-25540
CVE-2020-25540 ThinkAdmin CVE-2020-25540 poc Since the directory traversal vulnerability is too limited, only the file reading function has been implemented. Please go easy on the criticism, and I appreciate your guidance. The logic is based on the PHP source code; the key is the encryption metho...
ThinkAdmin-CVE-2020-25540
ThinkAdmin-CVE-2020-25540 ThinkAdmin CVE-2020-25540 POC Usage $ python3 exploit.py -t -c...
ThinkAdmin 6 - Local File Inclusion
ThinkAdmin version 6 is affected by a local file inclusion vulnerability because an unauthorized attacker can read arbitrary files on a remote server via GET request encode parameter. id: CVE-2020-25540 info: name: ThinkAdmin 6 - Local File Inclusion author: geeknik severity: high description:...
CVE-2020-25540
cve-2020-25540 This script is used to exploit arbitrary file read vulnerabilities in ThinkAdmin v5 and v6 versions ==Note that the interface path may vary across different versions some are based on the original ThinkAdmin with secondary development== The original interface is:...
CVE-2026-111655
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...
CVE-2026-111655 ThinkAdmin think-plugs-admin through 1.0.81 IDOR via admin/file.edit
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...
CVE-2026-111655
The ThinkAdmin think-plugs-admin software (through version 1.0.81 ) is vulnerable to an Insecure Direct Object Reference (IDOR) flaw. The issue exists in the admin/file.edit endpoint, where non-super administrators can read or overwrite file records belonging to other administrators. By requestin...
CVE-2026-111655 ThinkAdmin think-plugs-admin through 1.0.81 IDOR via admin/file.edit
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...
CVE-2026-111655
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...
CVE-2026-111655 ThinkAdmin think-plugs-admin through 1.0.81 IDOR via admin/file.edit
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...
EUVD-2026-103077
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...
CVE-2026-111655: Authorization Bypass Through User-Controlled Key
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...
PT-2026-116054
🚨 CVE-2026-111655 ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POS...
Zou Jingli: ThinkLibrary for ThinkAdmin – Authorization Issues Vulnerability
Zou Jingli: The ThinkLibrary for ThinkAdmin versions 1.0.81 and earlier have an authorization issue vulnerability. This vulnerability stems from an insecure direct object reference in the admin/file.edit function. Non-super administrators who own that node can read or overwrite other...
ThinkAdmin 6 - Local File Inclusion Detection
ThinkAdmin version 6 is affected by a local file inclusion vulnerability because an unauthorized attacker can read arbitrary files on a remote server via GET request encode parameter. !/usr/bin/env python3 -- coding: utf-8 -- """ThinkAdmin version 6 is affected by a local file inclusion...
EUVD-2021-1196
Malware in sbrugna...
EUVD-2023-52992
Malicious code in bioql PyPI...