| Package | Affected versions | Patched versions |
|---|---|---|
| zoujingli/thinkadmin | ≥ 4.0, < 6.1.0 | 6.1.0 |
| thinkadmin | ≥ 4.0, ≤ 6.0 |
An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wechat/controller/api/Push.php, which may lead to arbitrary remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free