Onethink

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Onethink records in CISA KEV

No Onethink vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Onethink 6 records HIGH

Records

6 records

TI-2024-22070 CVE-2024-33444 · GHSA-954c-ggpp-6356

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate…

HIGH 82

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00899 Published 2024-04-29 No fix listed CWE-89

TI-2024-22069 CVE-2024-33443 · GHSA-jmrw-j3gj-4xq7

An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a…

HIGH 66

An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00705 Published 2024-04-29 No fix listed CWE-94

TI-2017-10443 CVE-2017-14323 · GHSA-cvpq-jx4g-whh2

SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and…

MEDIUM 49

SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution v…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04328 Published 2018-04-10 No fix listed CWE-918

TI-2018-10878 CVE-2018-15198 · GHSA-j3mc-884p-f75v

An issue was discovered in OneThink v1.1.

LOW 39

An issue was discovered in OneThink v1.1.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2018-08-08 No fix listed CWE-352

TI-2018-10877 CVE-2018-15197 · GHSA-c32p-hj2m-2vqp

An issue was discovered in OneThink v1.1.

LOW 39

An issue was discovered in OneThink v1.1.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2018-08-08 No fix listed CWE-352

TI-2018-11791 CVE-2018-16449 · GHSA-qrq6-m6p6-cqvp

OneThink 1.1.141212 allows CSRF for adding a page via admin.php?s=/Channel/add.html…

LOW 30

OneThink 1.1.141212 allows CSRF for adding a page via admin.php?s=/Channel/add.html, adding a blog via admin.php?s=/Article/update.html, and setting the audit state via admin.php?s=/Article/setStatus/status/1.html.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00556 Published 2018-09-04 No fix listed CWE-352

Open these records in search →

Critical	2
High	3
Medium	1
Low	0
No CVSS	0