6 matches found
HTMLy 代码注入漏洞
HTMLy is HTMLy open source set of PHP-based blogging platform. A code injection vulnerability exists in htmly 3.1.0 and earlier versions, which stems from incorrect manipulation of the parameter label in the file /htmly/admin/field/post, and could lead to a cross-site scripting attack...
HTMLy 安全漏洞
HTMLy is a PHP-based open source blogging platform. A security vulnerability exists in HTMLy version v2.9.5, which stems from the presence of a stored cross-site scripting XSS vulnerability. An attacker can exploit the vulnerability to execute arbitrary web script or HTML code by injecting a...
HTMLy 路径遍历漏洞
HTMLy is a PHP-based open source blogging platform. A path traversal vulnerability exists in HTMLy versions prior to 2.8.1. A remote attacker can exploit this vulnerability to delete arbitrary files with the help of modified file parameters...
HTMLy 路径遍历漏洞
HTMLy is a PHP-based open source blogging platform. HTMLy v2.8.1 version of a path traversal vulnerability, the vulnerability stems from the presence of arbitrary file deletion in its viewsackup.html.php component...
HTMLy 跨站脚本漏洞
HTMLy is a PHP-based open source blogging platform. A security vulnerability exists in HTMLy 2.8.1 that could lead to cross-site scripting via the copyright field in the /admin/config page...
HTMLy 跨站脚本漏洞
HTMLy is a PHP-based open source blogging platform. A cross-site scripting vulnerability exists in htmly 2.8.0, which originates from config.html.php...