Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Chuddy

#29870of 53,622
8.8Total CVSS
Vulnerabilities · 1
PT-2023-12134
8.8
2023-08-11
Unknown · Pear-Admin-Think · CVE-2021-29378
**Name of the Vulnerable Software and Affected Versions** pear-admin-think version 2.1.2 **Description** The issue allows attackers to execute arbitrary code and escalate privileges via a crafted GET request to "Crud.php". This enables attackers to potentially gain unauthorized access and control over the system. **Recommendations** For pear-admin-think version 2.1.2, consider disabling access to the Crud.php file until a patch is available. Restrict access to the `GET` request endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.