EUVD-2020-13907

Malware in sbrugna...

EUVD-2019-1937

Malware in sbrugna...

EUVD-2018-9572

Malware in sbrugna...

EUVD-2020-20550

Malware in sbrugna...

EUVD-2018-9573

Malware in sbrugna...

CVE-2024-33445

An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component...

CVE-2020-21130

Cross Site Scripting XSS vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html...

CVE-2020-28062

An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList$decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code...

CVE-2019-1010193

hisiphp 1.0.8 is affected by: Cross Site Scripting XSS...

CVE-2024-33445

An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component...

CVE-2024-33445

An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component...

CVE-2024-33445

An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component...

PT-2024-25265 · Hisiphp · Hisiphp

Name of the Vulnerable Software and Affected Versions: hisiphp version 2.0.111 Description: An issue in hisiphp allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component. Recommendations: For hisiphp version...

CVE-2020-28062

An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList$decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code...

CVE-2020-28062

An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList$decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code...

Improper access control

An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList$decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code...

CVE-2020-28062

CVE-2020-28062 — HisiPHP 2.0.11 : An Access Control vulnerability exists where specially crafted packets in code constructing directories (notably involving the path containing / Upload/Plugins /) can enable a remote attacker to execute arbitrary code. Multiple connected sources corroborate the s...

CVE-2020-28062

An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList$decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code...

HisiPHP 代码问题漏洞

HisiPHP is a set of rapid development framework based on ThinkPHP and Layui, which integrates permission management, module management, plugin management and database management and other functions. A security vulnerability exists in HisiPHP 2.0.11 via a special packet constructed in...

The vulnerability of the addgroup.html component of the HisiPHP framework for web administration development (developed based on ThinkPHP5.1 and layui) relates to the lack of security measures for website structures. This vulnerability allows attackers to execute cross-site scripting attacks.

The vulnerability of the addgroup.html component in the HisiPHP framework developed based on ThinkPHP5.1 and layui for developing web applications in PHP is related to the lack of security measures for website structures. Exploiting this vulnerability allows a remote attacker to perform cross-sit...