Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 6:21 a.m.•24 views

CVE-2024-10749

A vulnerability, which was classified as critical, was found in ThinkAdmin up to 6.1.67. Affected is the function script of the file /app/admin/controller/api/Plugs.php. The manipulation of the argument uptoken leads to deserialization. It is possible to launch the attack remotely. The complexity...

8.1CVSS6.2AI score0.00532EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/04 1:15 a.m.•62 views

CVE-2024-10749

A vulnerability, which was classified as critical, was found in ThinkAdmin up to 6.1.67. Affected is the function script of the file /app/admin/controller/api/Plugs.php. The manipulation of the argument uptoken leads to deserialization. It is possible to launch the attack remotely. The complexity...

8.1CVSS0.00532EPSS
SaveExploits0References4
OSV
OSV
•added 2024/11/04 1:15 a.m.•13 views

CVE-2024-10749

A vulnerability, which was classified as critical, was found in ThinkAdmin up to 6.1.67. Affected is the function script of the file /app/admin/controller/api/Plugs.php. The manipulation of the argument uptoken leads to deserialization. It is possible to launch the attack remotely. The complexity...

8.1CVSS4.9AI score0.00532EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/11/04 12:00 a.m.•14 views

ThinkAdmin 代码问题漏洞

ThinkAdmin is ThinkAdmin open source a set of general purpose backend management system based on ThinkPHP framework. A code issue vulnerability exists in ThinkAdmin 6.1.67 and earlier versions, which stems from improper handling of the parameter uptoken, leading to deserialization...

8.1CVSS5.4AI score0.00532EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/04 12:00 a.m.•1 views

CVE-2024-10749: Deserialization of Untrusted Data

A vulnerability, which was classified as critical, was found in ThinkAdmin up to 6.1.67. Affected is the function script of the file /app/admin/controller/api/Plugs.php. The manipulation of the argument uptoken leads to deserialization. It is possible to launch the attack remotely. The complexity...

8.1CVSS5.3AI score0.00532EPSS
SaveExploits0References1
Rows per page
Query Builder