CVE-2026-37107

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the getfeed function in the admin.php component...

EUVD-2026-99005

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the getfeed function in the admin.php component...

PT-2026-111798

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get feed function in the admin.php component...

CVE-2026-37107

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the getfeed function in the admin.php component...

CVE-2026-37107

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the getfeed function in the admin.php component...

CVE-2026-37107: Improper Privilege Management

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the getfeed function in the admin.php component...

CVE-2026-37107

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the getfeed function in the admin.php component...

CVE-2026-37107

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component. The vulnerability is associated with CWE-269 (Improper Privilege Management) and carries a CRITICAL CVSS 3.1 base score of 9.8. Specific exploit details or remediation i...

CVE-2026-37107

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the getfeed function in the admin.php component...

Dan HTML Security Vulnerability

A security vulnerability exists in HTMLy version 3.1.1. It stems from issues in the getfeed function within the admin.php component, potentially allowing remote attackers to escalate privileges...

HTMLy 3.1.1 Authenticated Server-Side Request Forgery

HTMLy version 3.1.1 contains an authenticated server-side request forgery vulnerability in its feed-import function. A user-controlled URL reaches filegetcontents without scheme validation, allowing requests to internal services and local-file disclosure through PHP stream wrappers and error...

CVE-2026-18645

A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function addcontent of the file /system/admin/admin.php of the component Admin Content Endpoint. Performing a manipulation of the argument oldfile results in path traversal. The attack may be initiated remotely. Th...

CVE-2026-18646

A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executing a manipulation of the argument Name can lead to path traversal. The attack may be launched remotely. The exploit has...

CVE-2026-18646

A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executing a manipulation of the argument Name can lead to path traversal. The attack may be launched remotely. The exploit has...

CVE-2026-18646 danpros HTMLy Author Name htmly.php path traversal

A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executing a manipulation of the argument Name can lead to path traversal. The attack may be launched remotely. The exploit has...

EUVD-2026-52431

A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executing a manipulation of the argument Name can lead to path traversal. The attack may be launched remotely. The exploit has...

CVE-2026-18646

A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executing a manipulation of the argument Name can lead to path traversal. The attack may be launched remotely. The exploit has...

CVE-2026-18646

CVE-2026-18646 affects danpros HTMLy up to 3.1.1. The vulnerability is in the file /system/htmly.php of the Author Name Handler component. Exploitation arises from manipulating the Name argument, enabling path traversal and potentially remote execution. The attack vector is network-based, with a ...

CVE-2026-18646 danpros HTMLy Author Name htmly.php path traversal

A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executing a manipulation of the argument Name can lead to path traversal. The attack may be launched remotely. The exploit has...

CVE-2026-18644

A vulnerability was identified in danpros HTMLy up to 3.1.1. Affected by this issue is the function unlink of the file /system/htmly.php of the component Delete Username Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched remotely. The exploit is...