Lucene search
+L

3 matches found

NVD
NVD
added 2018/10/01 8:29 a.m.26 views

CVE-2018-17827

HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injected into app/admin/model/AdminPlugins.php...

7.2CVSS7.4AI score0.01437EPSS
SaveExploits1References1
OSV
OSV
added 2018/10/01 8:29 a.m.7 views

CVE-2018-17827

HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injected into app/admin/model/AdminPlugins.php...

7.2CVSS6.1AI score0.01437EPSS
SaveExploits1References1
Prion
Prion
added 2018/10/01 8:29 a.m.17 views

Code injection

HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injected into app/admin/model/AdminPlugins.php...

6.5CVSS7.4AI score0.01437EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder