CVE-2020-35337

Mô tả

Tham khảo

• blog.unc1e.com/2020/12/thinksaas-has-post-auth-sql-injection.html · Exploit
• thinksaas/ThinkSAAS · Third Party Advisory

Lỗ hổng khác của thinksaas

• CVE-2024-6942TRUNG BÌNH 5.4A vulnerability, which was classified as problematic, was found in ThinkSAAS 3.7.0. Affected is an unknown function of the file app/system/a…
• CVE-2024-6941TRUNG BÌNH 5.4A vulnerability, which was classified as problematic, has been found in ThinkSAAS 3.7.0. This issue affects some unknown processing of the f…
• CVE-2024-40456NGHIÊM TRỌNG 9.8ThinkSAAS v3.7.0 was discovered to contain a SQL injection vulnerability via the name parameter at \system\action\update.php.
• CVE-2024-40455THẤP 2.7An arbitrary file deletion vulnerability in ThinkSAAS v3.7 allows attackers to delete arbitrary files via a crafted request.
• CVE-2024-33102TRUNG BÌNH 5.4A stored cross-site scripting (XSS) vulnerability in the component /pubs/counter.php of ThinkSAAS v3.7.0 allows attackers to execute arbitra…