Vulnerabilities (CVE)

Filtered by vendor Pearadmin Subscribe
Filtered by product Pearadmin Think
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-29377 1 Pearadmin 1 Pearadmin Think 2024-11-21 7.5 HIGH 9.8 CRITICAL
Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely. A .php file can be uploaded via admin.php/index/upload because app/common/service/UploadService.php mishandles fileExt.