ThinkAdmin Admin Panel Access using Default Credentials

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-35296 · ADVISORY
• Shrimant12/CVE-References · WEB
• zoujingli/ThinkAdmin · PACKAGE
• smshrimant.com/admin-panel-access-using-default-credentials · WEB
• smshrimant.com/admin-panel-access-using-default-credentials · Exploit

Weitere Schwachstellen in zoujingli/thinkadmin

• CVE-2023-48966HOCH 8.8An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to execute arbitrary c…
• CVE-2020-23653KRITISCH 9.8An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/w…
• CVE-2020-29315MITTEL 5.4ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML.
• CVE-2020-25540HOCH 7.5ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via …
• CVE-2019-11018KRITISCH 9.8application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after…