10 matches found
CVE-2024-33445
An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component...
CVE-2024-33445
An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component...
CVE-2024-33445
An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component...
Hcode Online Judge security vulnerabilities
Hcode Online Judge HOJ is a distributed architecture online assessment platform OJ for HimitZH individual developers. A security vulnerability exists in Hcode Online Judge version v2.0.111, which originates from an arbitrary code execution vulnerability in the SystemPlugins::mkInfo parameter of t...
CVE-2024-33445: Improper Control of Generation of Code
An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component...
CVE-2024-33445
An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component...
CVE-2024-33445
An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component...
CVE-2024-33445
An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component...
CVE-2024-33445
An arbitrary code execution vulnerability exists in hisiphp v2.0.111 within the SystemPlugins.php component. A remote attacker can exploit this by sending a crafted script to the SystemPlugins::mkInfo parameter. The impact is significant as it allows for remote code execution. To mitigate this ri...
PT-2021-10715
Name of the Vulnerable Software and Affected Versions HomeAutomation version 3.3.2 Description The issue allows for authenticated OS command execution using the custom command v0.1 plugin. This can be exploited, in conjunction with a CSRF vulnerability, to execute arbitrary shell commands as the...