CVE-2020-21130

Cross Site Scripting XSS vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html...

File Upload Vulnerability in HisiPHP v2.0.10 Backend

HisiPHP is a ThinkPHP5.1 + Layui based development of a general-purpose back-end management framework , the default integration of permissions management , module management , plug-in management , hooks management , database management and other commonly used functions . HisiPHP v2.0.10 file uplo...

HisiPHP Cross-Site Request Forgery Vulnerability

HisiPHP is a set of rapid development framework based on ThinkPHP and Layui, which integrates permission management, module management, plugin management and database management. A cross-site request forgery vulnerability exists in HisiPHP version 1.0.8, which stems from the...

CVE-2018-17827

HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injected into app/admin/model/AdminPlugins.php...