Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HisiPHP 代码问题漏洞
Vulnerability Description
HisiPHP是一套基于ThinkPHP和Layui的快速开发框架，它集成了权限管理、模块管理、插件管理和数据库管理等功能。 HisiPHP 2.0.11 存在安全漏洞，该漏洞通过$files=Dir:：getList（$decompath./Upload/Plugins/）中构造的特殊数据包存在，这可能会让远程恶意用户执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A