228 matches found
CVE-2024-34191
htmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the deletepost function at admin.php. This vulnerability allows attackers to delete arbitrary files via a crafted request...
htmly 安全漏洞
HTMLy is a PHP-based open source blogging platform. A security vulnerability exists in htmly version v2.9.6, which stems from the presence of an arbitrary file deletion vulnerability that allows an attacker to delete arbitrary files via a crafted request...
PT-2024-25730
Name of the Vulnerable Software and Affected Versions htmly version 2.9.6 Description The issue allows attackers to delete arbitrary files by sending a crafted request to the admin.php endpoint, specifically via the delete post function. Recommendations For version 2.9.6, consider restricting...
CVE-2024-34191: Path Traversal: '.../...//'
htmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the deletepost function at admin.php. This vulnerability allows attackers to delete arbitrary files via a crafted request...
CVE-2024-30953
A stored cross-site scripting XSS vulnerability in Htmly v2.9.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Link Name parameter of Menu Editor module...
HTMLy 安全漏洞
HTMLy is a PHP-based open source blogging platform. A security vulnerability exists in HTMLy version v2.9.5, which stems from the presence of a stored cross-site scripting XSS vulnerability. An attacker can exploit the vulnerability to execute arbitrary web script or HTML code by injecting a...
CVE-2024-30953
The PHP-based open source blogging platform Htmly v2.9.5 is susceptible to a stored cross-site scripting (XSS) vulnerability. The root cause is the improper neutralization of input within the Link Name parameter of the Menu Editor module, which allows an attacker to inject and execute arbitrary w...
PT-2024-23690 · Htmly · Htmly
Name of the Vulnerable Software and Affected Versions: Htmly version 2.9.5 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Link Name parameter of the Menu Editor module. Recommendations: For Htm...
CVE-2024-30953
A stored cross-site scripting XSS vulnerability in Htmly v2.9.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Link Name parameter of Menu Editor module...
CVE-2024-30953: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in Htmly v2.9.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Link Name parameter of Menu Editor module...
CVE-2024-30953
A stored cross-site scripting XSS vulnerability in Htmly v2.9.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Link Name parameter of Menu Editor module...
CVE-2024-30953
A stored cross-site scripting XSS vulnerability in Htmly v2.9.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Link Name parameter of Menu Editor module...
HTMLy Version v2.9.6 - Stored XSS Vulnerability
Exploit Title: HTMLy Version v2.9.6 - Stored XSS Exploit Author: tmrswrr Vendor Homepage: https://www.htmly.com/ Version 3.10.8.21 Date : 04/08/2024 1 Login admin https://127.0.0.1/HTMLy/admin/config 2 General Setting Blog title " 3 After save it you will be see XSS alert...
HTMLy Version v2.9.6 - Stored XSS
Exploit Title: HTMLy Version v2.9.6 - Stored XSS Exploit Author: tmrswrr Vendor Homepage: https://www.htmly.com/ Version 3.10.8.21 Date : 04/08/2024 1 Login admin https://127.0.0.1/HTMLy/admin/config 2 General Setting Blog title " 3 After save it you will be see XSS alert...
HTMLy 2.9.6 Cross Site Scripting
Exploit Title: HTMLy Version : 2.9.6 - Stored XSS Exploit Author: tmrswrr Vendor Homepage: https://www.htmly.com/ Version 3.10.8.21 Date : 04/08/2024 1 Login admin https://127.0.0.1/HTMLy/admin/config 2 General Setting Blog title " 3 After save it you will be see xss alert...
CVE-2021-33354
Directory Traversal vulnerability in htmly before 2.8.1 allows remote attackers to perform arbitrary file deletions via modified file parameter...
CVE-2021-33354
Directory Traversal vulnerability in htmly before 2.8.1 allows remote attackers to perform arbitrary file deletions via modified file parameter...
Directory traversal
Directory Traversal vulnerability in htmly before 2.8.1 allows remote attackers to perform arbitrary file deletions via modified file parameter...