TI-2025-08670 CVE-2025-9461 · GHSA-wqjm-r535-pwhh
diyhi bbs File Compression FilePackageManageAction.java information disclosure
Priority MEDIUM 57
A weakness has been identified in diyhi bbs up to 6.8.
diyhi
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
diyhi records in CISA KEVNo diyhi vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records
TI-2025-06142 CVE-2025-6762 · GHSA-36v8-f67v-63cx
diyhi bbs HTTP Header login getUrl server-side request forgery
Priority MEDIUM 57
A vulnerability classified as critical has been found in diyhi bbs up to 6.8.
TI-2025-05854 CVE-2025-6453 · GHSA-pq7r-gxvg-33fh
diyhi bbs API ForumManageAction.java add path traversal
Priority MEDIUM 57
A vulnerability classified as critical has been found in diyhi bbs 6.8.
TI-2022-07477 CVE-2022-23390 · GHSA-j9w2-jfqj-7xhr
An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files.
Priority MEDIUM 45
An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files.
TI-2021-19149 CVE-2021-43097 · GHSA-mp24-57ph-cp63
A Server-side Template Injection (SSTI) vulnerability exists in bbs 5.3 in…
Priority LOW 36
A Server-side Template Injection (SSTI) vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a malicoius user execute arbitrary code.
TI-2021-19155 CVE-2021-43103 · GHSA-g25w-7qh2-phgc
A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType…
Priority LOW 35
A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code.
TI-2021-19154 CVE-2021-43102 · GHSA-m43x-6jf6-86jw
A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType…
Priority LOW 35
A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code.
TI-2021-19153 CVE-2021-43101 · GHSA-hq2j-pp84-qph2
A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a…
Priority LOW 35
A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code.
TI-2021-19152 CVE-2021-43100 · GHSA-2r6m-w2r6-qp6v
A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType…
Priority LOW 35
A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code.
TI-2021-19150 CVE-2021-43098 · GHSA-qw6c-xvf7-qgc4
A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function.
Priority LOW 34
A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function.
TI-2021-19151 CVE-2021-43099 · GHSA-g5mc-2cpg-f638
An Archive Extraction (AKA "Zip Slip) vulnerability exists in bbs 5.3 in the UpgradeNow…
Priority LOW 25
An Archive Extraction (AKA "Zip Slip) vulnerability exists in bbs 5.3 in the UpgradeNow function in UpgradeManageAction.java, which unzips the arbitrary upladed zip file without checking filenames.