Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
CRITICAL 9.8
CVE-2024-33445
An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the Sy…
Hisiphp
No fix yet
HIGH 7.2
CVE-2020-28062
An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath. '/ Upload/Plug…
Hisiphp
No fix yet
MEDIUM 6.1
CVE-2020-21130
Cross Site Scripting (XSS) vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html.
Hisiphp
No fix yet
MEDIUM 6.1
CVE-2019-1010193
hisiphp 1.0.8 is affected by: Cross Site Scripting (XSS).
Hisiphp
No fix yet
HIGH 8.8
CVE-2018-17826
HisiPHP 1.0.8 allows CSRF via admin.php/admin/user/adduser.html to add an administrator account. The attacker can then use that account to execute ar…
Hisiphp
No fix yet
HIGH 7.2
CVE-2018-17827
HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injected into …
Hisiphp
No fix yet