CVE-2020-25540 PoC — ThinkAdmin 路径遍历漏洞

Source

https://github.com/lowkey0808/cve-2020-25540

Associated Vulnerability

Title:ThinkAdmin 路径遍历漏洞 (CVE-2020-25540)
Description:ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter.

Readme

# ThinkAdmin未授权列目录/任意文件读取
cve-2020-25540
# 使用方式
```
python3 cve-2020-25540.py url
```
![图片](https://user-images.githubusercontent.com/49674960/167533148-31a79360-e057-4932-bc2b-08da8da4065a.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →