Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Chuddy

#29874de 53,630
8.8CVSS total
Vulnerabilidades · 1
PT-2023-12134
8.8
2023-08-11
Unknown · Pear-Admin-Think · CVE-2021-29378
**Name of the Vulnerable Software and Affected Versions** pear-admin-think version 2.1.2 **Description** The issue allows attackers to execute arbitrary code and escalate privileges via a crafted GET request to "Crud.php". This enables attackers to potentially gain unauthorized access and control over the system. **Recommendations** For pear-admin-think version 2.1.2, consider disabling access to the Crud.php file until a patch is available. Restrict access to the `GET` request endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.