Pichome 跨站脚本漏洞

Pichome is a powerful open source web hosting program for image and media file management by individual developer zyx0814. A security vulnerability exists in Pichome 2.1.0 and prior versions, which stems from insufficient cleaning of user input in the login form and could lead to a cross-site...

CVE-2025-1743

The CVE-2025-1743 entry affects zyx0814 Pichome 2.1.0, specifically the /index.php?mod=textviewer endpoint where manipulating the src parameter enables path traversal. The Nuclei template for Pichome 2.1.0 documents an arbitrary file read via this path traversal, with remote exploit capability an...

Pichome Code Issue Vulnerability

Qiaoqiao Times PicHome is a program to quickly create online galleries, audio/video libraries, and text libraries by China Qiaoqiao Times Company. A code issue vulnerability exists in Pichome version v.1.1.01, which originates from index.php that allows remote attackers to execute arbitrary code...