HisiPHP cross-site scripting vulnerability (CNVD-2021-49144)

HisiPHP is a ThinkPHP and Layui based on the development of a common back-end management framework open source and free , the default integration of permissions management , module management , plug-in management , hooks management , database management and other commonly used features to...

CVE-2020-21130

Cross Site Scripting XSS vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html...

Cross site scripting

Cross Site Scripting XSS vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html...

CVE-2020-21130

Cross Site Scripting XSS vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html...

CVE-2020-21130

CVE-2020-21130 affects HisiPHP 2.0.8 with a reflected/stored? cross-site scripting via the group name in addgroup.html. The Connected documents confirm multiple sources reporting the same XSS vector but do not provide concrete details on affected versions beyond 2.0.8, root cause, or a published ...

HisiPHP 跨站脚本漏洞

HisiPHP is a ThinkPHP and Layui based on the development of a common back-end management framework open source and free , the default integration of permissions management , module management , plug-in management , hooks management , database management and other commonly used features to...

File Inclusion Vulnerability in HisiPHP

HisiPHP is based on ThinkPHP5 + Layui development of a set of free WEB open source framework. HisiPHP has a file inclusion vulnerability. Attackers can use the vulnerability to obtain server privileges...

Command Execution Vulnerability in HisiPHP

HisiPHP is based on ThinkPHP5 + Layui development of a set of free WEB open source framework. HisiPHP has a command execution vulnerability. Attackers can use the vulnerability to obtain server privileges...

Arbitrary File Deletion Vulnerability in HisiPHP (CNVD-2020-48610)

HisiPHP is based on ThinkPHP5 + Layui development of a set of free WEB open source framework. HisiPHP has an arbitrary file deletion vulnerability. Attackers can use the vulnerability to delete lock files , resulting in system reinstallation...

Arbitrary File Deletion Vulnerability in HisiPHP

HisiPHP is based on ThinkPHP5 + Layui development of a set of free WEB open source framework. HisiPHP has an arbitrary file deletion vulnerability. Attackers can use the vulnerability to delete lock files , resulting in system reinstallation...

File inclusion vulnerability in HisiPHP me***.php file

HisiPHP is based on ThinkPHP5 + Layui development of a set of free WEB open source framework. HisiPHP me.php file file inclusion vulnerability. Attackers can use the vulnerability to obtain server privileges...

Command execution vulnerability exists in HisiPHP (CNVD-2020-48613)

HisiPHP is based on ThinkPHP5 + Layui development of a set of free WEB open source framework. HisiPHP has a command execution vulnerability. Attackers can use the vulnerability to obtain server privileges...

Command Execution Vulnerability in HisiPHP V2.0.11

HisiPHP is based on ThinkPHP5 + Layui development of a set of free WEB open source framework. HisiPHP V2.0.11 has a command execution vulnerability that can be exploited by an attacker to gain server privileges...

Command Execution Vulnerability in Hisiphp V2.0.10

HisiPHP based on ThinkPHP5 + Layui development of a free WEB open source framework. Hisiphp V2.0.10 there is a command execution vulnerability , an attacker can exploit the vulnerability to write a configuration file , and the configuration file contains , execute commands...

HisiPHP Cross-Site Scripting Vulnerability

HisiPHP is a set of rapid development framework based on ThinkPHP and Layui, which integrates permission management, module management, plugin management and database management. A cross-site scripting vulnerability exists in hisiphp version 1.0.8. The vulnerability stems from the lack of proper...

CVE-2019-1010193

hisiphp 1.0.8 is affected by: Cross Site Scripting XSS...

CVE-2019-1010193

hisiphp 1.0.8 is affected by: Cross Site Scripting XSS...

Cross site scripting

hisiphp 1.0.8 is affected by: Cross Site Scripting XSS...

CVE-2019-1010193

hisiphp 1.0.8 is affected by: Cross Site Scripting XSS...

CVE-2019-1010193

Summary: CVE-2019-1010193 affects Hisiphp 1.0.8, a ThinkPHP/Layui-based framework. Vulnerability: Cross-Site Scripting (XSS) due to insufficient validation of client-supplied data in the web application. Root cause: lack of proper input validation in the affected web interface/component. Impact (...