CVE-2024-33445

Name of the Vulnerable Software and Affected Versions hisiphp version 2.0.111

Description An issue in hisiphp allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component.

Recommendations For hisiphp version 2.0.111, consider disabling access to the SystemPlugins.php component or restricting the use of the SystemPlugins::mkInfo parameter until a patch is available. Avoid using the SystemPlugins::mkInfo parameter in the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.