Onethink: >> Onethink >> 1.1 Security Vulnerabilities
An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component.
CVSS Score
7.1
EPSS Score
0.001
Published
2024-04-29
SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component.
CVSS Score
9.8
EPSS Score
0.001
Published
2024-04-29
An issue was discovered in OneThink v1.1. There is a CSRF vulnerability in admin.php?s=/AuthManager/addToGroup.html that can endow administrator privileges.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-08-08
An issue was discovered in OneThink v1.1. There is a CSRF vulnerability in admin.php?s=/User/add.html that can add a user.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-08-08
SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter.
CVSS Score
9.8
EPSS Score
0.073
Published
2018-04-10