CVE-2020-35337 | BDVDB-2026-150839 Detail

Description#

ThinkSAAS before 3.38 contains a SQL injection vulnerability through app/topic/action/admin/topic.php via the title parameter, which allows remote attackers to execute arbitrary SQL commands.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/thinksaas/ThinkSAAS/issues/24
https://blog.unc1e.com/2020/12/thinksaas-has-post-auth-sql-injection.html

Exploit#

No public exploit known

History#

Version 12021-03-24Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.