CVE-2020-25540

This exploit leverages an arbitrary file read vulnerability in ThinkAdmin v6 by manipulating the 'encode' parameter in a specific URL path. The payloads provided demonstrate reading sensitive files like database.php on Windows and /etc/passwd on Linux.

This PoC exploits CVE-2020-25540 in ThinkAdmin by leveraging a directory traversal vulnerability to read arbitrary files. It encodes the command using base36 and sends it via a crafted URI to retrieve the file content.

This exploit leverages CVE-2020-25540, a command injection vulnerability in ThinkAdmin, by encoding the payload in base36 and sending it via a crafted URI to achieve remote command execution (RCE). The script decodes the response to display the command output.

This PoC exploits CVE-2020-25540, an arbitrary file read vulnerability in ThinkAdmin v5 and v6. It uses base36 encoding to bypass restrictions and retrieve file contents via an API endpoint.

This PoC exploits an arbitrary file read vulnerability in ThinkAdmin by leveraging a path traversal flaw via base36-encoded directory traversal sequences. It allows reading files from the server by manipulating the 'encode' parameter in the API endpoint.