Pichome 跨站脚本漏洞

Pichome is a powerful open source web hosting program for image and media file management by individual developer zyx0814. A security vulnerability exists in Pichome 2.1.0 and prior versions, which stems from insufficient cleaning of user input in the login form and could lead to a cross-site...

CVE-2025-1743

CVE-2025-1743 affects zyx0814 Pichome 2.1.0. A path traversal flaw exists in the /index.php?mod=textviewer endpoint via the src parameter, enabling remote access to read files. The connected nuclei template confirms this is a critical vulnerability described as arbitrary file read with remote ini...

Pichome Code Issue Vulnerability

Qiaoqiao Times PicHome is a program to quickly create online galleries, audio/video libraries, and text libraries by China Qiaoqiao Times Company. A code issue vulnerability exists in Pichome version v.1.1.01, which originates from index.php that allows remote attackers to execute arbitrary code...