Vulnerabilities (CVE)

Filtered by vendor Thinkadmin Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-34833 1 Thinkadmin 1 Thinkadmin 2023-12-07 N/A 6.1 MEDIUM
An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file.
CVE-2020-29315 1 Thinkadmin 1 Thinkadmin 2023-12-07 4.3 MEDIUM 5.4 MEDIUM
ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML.