CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2018/10/01 8:29 a.m.•13 views

CVE-2018-17827

HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injected into app/admin/model/AdminPlugins.php...

7.2CVSS6.1AI score0.01437EPSS

SaveExploits1References1

NVD•added 2018/10/01 8:29 a.m.•31 views

CVE-2018-17827

HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injected into app/admin/model/AdminPlugins.php...

7.2CVSS7.4AI score0.01437EPSS

SaveExploits1References1

Prion•added 2018/10/01 8:29 a.m.•22 views

Code injection

HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injected into app/admin/model/AdminPlugins.php...

6.5CVSS7.4AI score0.01437EPSS

SaveExploits1References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/10/01 12:00 a.m.•2 views

CVE-2018-17827: Improper Control of Generation of Code

HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injected into app/admin/model/AdminPlugins.php...

7.2CVSS7.7AI score0.01437EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by