| Package | Affected versions | Patched versions |
|---|---|---|
| pearadmin think | ≤ 2.1.2 |
Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely. A .php file can be uploaded via admin.php/index/upload because app/common/service/UploadService.php mishandles fileExt.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free