Skip to content
Noroxi

hisiphp records

6 published records for vendor hisiphp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 21
  4. 22
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2024-33445
    39Monitor

    An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter

    CriticalCVSS 9.8No exploitEPSS 1%

    hisiphp · hisiphpApr 29, 2024

  • CVE-2018-17826
    35Monitor

    HisiPHP 1.0.8 allows CSRF via admin.php/admin/user/adduser.html to add an administrator account.

    HighCVSS 8.8No exploitEPSS 0%

    hisiphp · hisiphpOct 1, 2018

  • CVE-2020-28062
    29Monitor

    An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath.

    HighCVSS 7.2No exploitEPSS 2%

    hisiphp · hisiphpApr 4, 2022

  • CVE-2018-17827
    28Monitor

    HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code.

    HighCVSS 7.2No exploitEPSS 1%

    hisiphp · hisiphpOct 1, 2018

  • CVE-2019-1010193
    24Monitor

    hisiphp 1.0.8 is affected by: Cross Site Scripting (XSS).

    MediumCVSS 6.1No exploitEPSS 0%

    hisiphp · hisiphpJul 24, 2019

  • CVE-2020-21130
    24Monitor

    Cross Site Scripting (XSS) vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html.

    MediumCVSS 6.1No exploitEPSS 0%

    hisiphp · hisiphpJun 21, 2021