These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executing a manipulation of the argument Name can lead to path traversal. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this discl [truncated]
A path traversal vulnerability was discovered in danpros HTMLy up to 3.1.1, affecting the add_content function in /system/admin/admin.php. The attack may be initiated remotely by manipulating the oldfile argument. The exploit has been released publicly. The vendor did not respond to early disclosure. This vulnerability allows remote attackers to manipulate files, potentially leading to unauthorized access [truncated]
A vulnerability was identified in danpros HTMLy up to 3.1.1, affecting the function unlink of the file /system/htmly.php in the Delete Username Endpoint. This allows remote attackers to manipulate the File argument, leading to path traversal. The exploit is publicly available, and defenders should assess their exposure and prioritize verification and potential remediation. The vulnerability has a CVSS sco [truncated]