CVE-2020-35337

概要

参考情報

• blog.unc1e.com/2020/12/thinksaas-has-post-auth-sql-injection.html · Exploit
• thinksaas/ThinkSAAS · Third Party Advisory

thinksaas のその他の脆弱性

• CVE-2024-6942中 5.4A vulnerability, which was classified as problematic, was found in ThinkSAAS 3.7.0. Affected is an unknown function of the file app/system/a…
• CVE-2024-6941中 5.4A vulnerability, which was classified as problematic, has been found in ThinkSAAS 3.7.0. This issue affects some unknown processing of the f…
• CVE-2024-40456緊急 9.8ThinkSAAS v3.7.0 was discovered to contain a SQL injection vulnerability via the name parameter at \system\action\update.php.
• CVE-2024-40455低 2.7An arbitrary file deletion vulnerability in ThinkSAAS v3.7 allows attackers to delete arbitrary files via a crafted request.
• CVE-2024-33102中 5.4A stored cross-site scripting (XSS) vulnerability in the component /pubs/counter.php of ThinkSAAS v3.7.0 allows attackers to execute arbitra…