Skip to content
OpenAdvisories

Vendor

danpros

5 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.1

    HTMLy CMS 3.1.1 Path Traversal via oldfile Parameter in Autosave

    HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authenticated attackers to relocate arbitrary files by supplying directory traversal sequences in the oldfile parameter at the admin autosave endpoint. Attackers can pa…