ThinkAdmin vulnerabilities
We track 3 vulnerabilities in ThinkAdmin products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2024.
Latest ThinkAdmin vulnerabilities
- 8.1 High severity
ThinkAdmin: Deserialization of Untrusted Data
A vulnerability, which was classified as critical, was found in ThinkAdmin up to 6.1.67. Affected is the function script of the file /app/admin/controller/api/Plugs.php. The manipulation of the argument uptoken leads to deserialization. It is possible to launc
- 8.8 High severity
Thinkadmin: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to execute arbitrary code via a crafted Zip file.
- 8.8 High severity
Thinkadmin: Unrestricted Upload of File with Dangerous Type
An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file.