EUVD-2018-9572

Malware in sbrugna...

CVE-2024-33445

An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component...

CVE-2020-21130

Cross Site Scripting XSS vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html...

HisiPHP cross-site scripting vulnerability (CNVD-2021-49144)

HisiPHP is a ThinkPHP and Layui based on the development of a common back-end management framework open source and free , the default integration of permissions management , module management , plug-in management , hooks management , database management and other commonly used features to...

Code injection

HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injected into app/admin/model/AdminPlugins.php...