CVE-2024-33445

概要

参考情報

• gist.github.com/LioTree/04a4ece38df53af4027d52b2aeb7aff6 · Exploit
• hisiphp/hisiphp · Exploit

hisiphp のその他の脆弱性

• CVE-2020-28062高 7.2An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath. '/ Up…
• CVE-2020-21130中 6.1Cross Site Scripting (XSS) vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html.
• CVE-2019-1010193中 6.1hisiphp 1.0.8 is affected by: Cross Site Scripting (XSS).
• CVE-2018-17827高 7.2HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injec…
• CVE-2018-17826高 8.8HisiPHP 1.0.8 allows CSRF via admin.php/admin/user/adduser.html to add an administrator account. The attacker can then use that account to e…