TI-2024-09963 CVE-2024-10749 · GHSA-r6cq-w3q4-7rwf
ThinkAdmin Plugs.php script deserialization
Priority LOW 13
A vulnerability, which was classified as critical, was found in ThinkAdmin up to 6.1.67.
Vulnerabilities
9 records
TI-2023-26703 CVE-2023-48966 · GHSA-7gq9-p94f-g5v9
An arbitrary file upload vulnerability in the component /admin/api.upload/file of…
Priority MEDIUM 40
An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to execute arbitrary code via a crafted Zip file.
TI-2023-26702 CVE-2023-48965 · GHSA-4rmh-8m7w-7535
An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers…
Priority HIGH 73
An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file.
TI-2023-17404 CVE-2023-34833 · GHSA-c49c-8c73-4w97
An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6…
Priority MEDIUM 60
An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file.
TI-2020-17934 CVE-2020-35296 · GHSA-cxv7-6jgf-7gwf
ThinkAdmin v6 has default administrator credentials, which allows attackers to gain…
Priority LOW 37
ThinkAdmin v6 has default administrator credentials, which allows attackers to gain unrestricted administratior dashboard access.
TI-2020-14629 CVE-2020-23653 · GHSA-4vp2-mj4m-69m4
An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through…
Priority MEDIUM 49
An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wechat/controller/api/Push.php, which may lead to arbitrary remote code execution…
TI-2020-17639 CVE-2020-29315 · GHSA-v47f-vp3p-5j6h
ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to…
Priority LOW 26
ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML.
TI-2020-15591 CVE-2020-25540 · GHSA-2qm5-r82g-5hcx
ThinkAdmin v6 is affected by a directory traversal vulnerability.
Priority HIGH 72
ThinkAdmin v6 is affected by a directory traversal vulnerability.
TI-2019-08235 CVE-2019-11018 · GHSA-qv5j-rwq3-m823
application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use…
Priority MEDIUM 45
application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change.