Vulnerabilities > Hisiphp
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-04-04 | CVE-2020-28062 | Unrestricted Upload of File with Dangerous Type vulnerability in Hisiphp 2.0.11 An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath. | 7.2 |
| 2021-06-21 | CVE-2020-21130 | Cross-site Scripting vulnerability in Hisiphp 2.0.8 Cross Site Scripting (XSS) vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html. | 6.1 |
| 2019-07-24 | CVE-2019-1010193 | Cross-site Scripting vulnerability in Hisiphp 1.0.8 hisiphp 1.0.8 is affected by: Cross Site Scripting (XSS). | 6.1 |
| 2018-10-01 | CVE-2018-17827 | Code Injection vulnerability in Hisiphp 1.0.8 HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. | 7.2 |
| 2018-10-01 | CVE-2018-17826 | Cross-Site Request Forgery (CSRF) vulnerability in Hisiphp 1.0.8 HisiPHP 1.0.8 allows CSRF via admin.php/admin/user/adduser.html to add an administrator account. | 8.8 |