20 matches found
CVE-2026-18645
A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function addcontent of the file /system/admin/admin.php of the component Admin Content Endpoint. Performing a manipulation of the argument oldfile results in path traversal. The attack may be initiated remotely. Th...
EUVD-2026-52431
A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executing a manipulation of the argument Name can lead to path traversal. The attack may be launched remotely. The exploit has...
CVE-2026-18646 danpros HTMLy Author Name htmly.php path traversal
A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executing a manipulation of the argument Name can lead to path traversal. The attack may be launched remotely. The exploit has...
CVE-2026-18646
A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executing a manipulation of the argument Name can lead to path traversal. The attack may be launched remotely. The exploit has...
CVE-2026-18645 danpros HTMLy Admin Content Endpoint admin.php add_content path traversal
A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function addcontent of the file /system/admin/admin.php of the component Admin Content Endpoint. Performing a manipulation of the argument oldfile results in path traversal. The attack may be initiated remotely. Th...
CVE-2026-18645 danpros HTMLy Admin Content Endpoint admin.php add_content path traversal
A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function addcontent of the file /system/admin/admin.php of the component Admin Content Endpoint. Performing a manipulation of the argument oldfile results in path traversal. The attack may be initiated remotely. Th...
EUVD-2026-52426
A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function addcontent of the file /system/admin/admin.php of the component Admin Content Endpoint. Performing a manipulation of the argument oldfile results in path traversal. The attack may be initiated remotely. Th...
CVE-2026-18645
CVE-2026-18645 affects danpros HTMLy up to 3.1.1. The vulnerability resides in the Admin Content Endpoint: add_content in /system/admin/admin.php, where manipulating the oldfile argument enables path traversal. Vulnerability can be exploited remotely, and a public exploit is available. Vendor did...
CVE-2026-18644 danpros HTMLy Delete Username Endpoint htmly.php unlink path traversal
A vulnerability was identified in danpros HTMLy up to 3.1.1. Affected by this issue is the function unlink of the file /system/htmly.php of the component Delete Username Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched remotely. The exploit is...
EUVD-2026-52424
A vulnerability was identified in danpros HTMLy up to 3.1.1. Affected by this issue is the function unlink of the file /system/htmly.php of the component Delete Username Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched remotely. The exploit is...
CVE-2026-18644
The vulnerability CVE-2026-18644 affects danpros HTMLy up to version 3.1.1. It targets the function unlink in the file /system/htmly.php of the Delete Username Endpoint, enabling path traversal through the File argument. The issue can be exploited remotely, and a public exploit exists. The vendor...
CVE-2026-18644
A vulnerability was identified in danpros HTMLy up to 3.1.1. Affected by this issue is the function unlink of the file /system/htmly.php of the component Delete Username Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched remotely. The exploit is...
PT-2026-67500
A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function add content of the file /system/admin/admin.php of the component Admin Content Endpoint. Performing a manipulation of the argument oldfile results in path traversal. The attack may be initiated remotely. T...
EUVD-2021-29822
Malicious code in bioql PyPI...
CVE-2021-42867
A Cross Site Scripting XSS vulnerability exists in DanPros htmly 2.8.1 via the Description field in 1 admin/config, and 2 index.php pages...
CVE-2021-42867
A Cross Site Scripting XSS vulnerability exists in DanPros htmly 2.8.1 via the Description field in 1 admin/config, and 2 index.php pages...
CVE-2021-42867
A Cross Site Scripting XSS vulnerability exists in DanPros htmly 2.8.1 via the Description field in 1 admin/config, and 2 index.php pages...
Cross site scripting
A Cross Site Scripting XSS vulnerability exists in DanPros htmly 2.8.1 via the Description field in 1 admin/config, and 2 index.php pages...
CVE-2021-42867
A Cross Site Scripting XSS vulnerability exists in DanPros htmly 2.8.1 via the Description field in 1 admin/config, and 2 index.php pages...
CVE-2021-42867
CVE-2021-42867 pertains to HTMLy 2.8.1 (also referenced as DanPros htmly 2.8.1) and describes a cross-site scripting (XSS) vulnerability that originates in the Description field used by the admin/config and index.php pages. The root cause is that unsanitized or unsafe content in the Description f...