Thinkadmin · weakness class

File and Path Handling

4 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Connect AI

check available: 1

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

ThinkAdmin 6 - Local File InclusionCVE-2020-25540Thinkadmin · 75% likely
CWE-22
An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to execute arbitrary code via a crafted Zip file.CVE-2023-48966Thinkadmin · 1.1% likely
CWE-434
An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file.CVE-2023-48965Thinkadmin · 0.9% likely
CWE-434
An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file.CVE-2023-34833Thinkadmin · 0.5% likely
CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.