mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 01:04:30 +00:00
686 B
686 B
CVE-2019-11018
Description
application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change.
POC
Reference
- https://github.com/zoujingli/ThinkAdmin/issues/173
- https://github.com/zoujingli/ThinkAdmin/issues/173
Github
No PoCs found on GitHub currently.