CVE-2024-33443

Name of the Vulnerable Software and Affected Versions onethink version 1.1

Description An issue in the software allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component.

Recommendations For onethink version 1.1, consider disabling access to the AddonsController.class.php component until a patch is available. Restrict the execution of arbitrary code to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.