CVE-2023-48965: Malicious File Upload
Published Dec 4, 2023
·Updated
An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file.
Affected Software
1 affected component
ThinkAdmin ThinkAdmin=6.1.53
Event History
Dec 4, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-48965?
The severity of CVE-2023-48965 is high, with a severity value of 8.8.
2
What is the affected software for CVE-2023-48965?
The affected software for CVE-2023-48965 is ThinkAdmin version 6.1.53.
3
How can attackers exploit CVE-2023-48965?
Attackers can exploit CVE-2023-48965 by providing a crafted URL to download a malicious PHP file.
4
Is there a fix for CVE-2023-48965?
There may be a fix available for CVE-2023-48965. Please refer to the provided reference for more information.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-48965?
The Common Weakness Enumeration (CWE) ID for CVE-2023-48965 is 434.