3 matches found
CVE-2020-28062
An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList$decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code...
PT-2022-8880
Name of the Vulnerable Software and Affected Versions HisiPHP version 2.0.11 Description An Access Control issue exists, allowing a remote malicious user to execute arbitrary code via specially constructed packets. The vulnerability is related to the $files = Dir::getList$decompath...
CVE-2020-28062: Unrestricted Upload of File with Dangerous Type
An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList$decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code...