Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-29rm-7h6p-fjf3

Опубликовано: 05 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code.

An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code.

EPSS

Процентиль: 73%
0.0079
Низкий

7.2 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.2
nvd
больше 3 лет назад

An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code.

EPSS

Процентиль: 73%
0.0079
Низкий

7.2 High

CVSS3

Дефекты

CWE-434