CVE-2020-28062

An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath

published April 4, 2022

CVSS
—
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02568 · 85.0th percentile
Published
2022-04-04T16:36Z
EPSS history
Timeline
  • 04 APR 16:36Z
    An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath
    cvelistv5