Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2019-11018

Description

application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change.

POC

Reference

- https://github.com/zoujingli/ThinkAdmin/issues/173

Github

No PoCs found on GitHub currently.