CVE-2023-48966

An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to execute arbitrary code via a crafted Zip file...

CVE-2023-48965

ThinkAdmin v6.1.53 contains an issue in the component /admin/api.plugs/script that allows an attacker to obtain a shell by requesting a crafted URL which downloads a malicious PHP file. Public sources in the connected records confirm the vulnerability is tied to ThinkAdmin v6.1.53, with the NVD e...

CVE-2023-48966

An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to execute arbitrary code via a crafted Zip file...

CVE-2023-48965

An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file...