Yahei.Net Yahei-PHP Prober vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Yahei.Net Yahei-PHP Prober: 1 record(s), with affected versions and fixes.
CVE-2019-25280
Medium · 6.1
CWE-79 Jan 7, 2026
Yahei-PHP Prober 0.4.7 Remote HTML Injection via Speed Parameter
Yahei-PHP Prober 0.4.7 contains a remote HTML injection vulnerability that allows attackers to execute arbitrary HTML code through the 'speed' GET parameter. Attackers can inject malicious HTML code in the 'speed' parameter of prober.php to trigger cross-site scripting in user browser sessions.