Vulnerabilities CVE-2019-25280

CVE-2019-25280

Medium

Open

TLP:CLEAR

Yahei-PHP Prober 0.4.7 Remote HTML Injection via Speed Parameter

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Yahei-PHP Prober 0.4.7 contains a remote HTML injection vulnerability that allows attackers to execute arbitrary HTML code through the 'speed' GET parameter. Attackers can inject malicious HTML code in the 'speed' parameter of prober.php to trigger cross-site scripting in user browser sessions.

Details

CVSS Score: 5.1
EPSS Score ⓘ: 0.24%

15.5th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Confidence: 90%
Published: Jan 7, 2026
Last Modified: Jul 15, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.