1dreamGN

2 exploits Active since Dec 2023
CVE-2023-48965 WRITEUP HIGH WRITEUP
ThinkAdmin v6.1.53 - Unrestricted Upload of File with Dangerous Type via /admin/api.plugs/script
An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file.
CVSS 8.8
CVE-2023-48966 WRITEUP HIGH WRITEUP
ThinkAdmin v6.1.53 - Arbitrary File Upload via Zip File
An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to execute arbitrary code via a crafted Zip file.
CVSS 8.8