Zoujingli vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Zoujingli products: 1 record(s), with severity, exploitation and fixes.

Think-plugs-admin 1

Exploited only (KEV) →

CVE-2026-111655 Low · 3.8 CWE-639 Oct 16, 2026

ThinkAdmin think-plugs-admin through 1.0.81 IDOR via admin/file.edit

ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with columns like xurl, hash, or uuid to view download URLs, tamper records, or reassign ownership.