Hyphp

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Hyphp records in CISA KEV

No Hyphp vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2022-08495 CVE-2022-24677 · GHSA-m7x8-hcqx-553q

MEDIUM 47

Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02493 Published 2022-02-08 No fix listed

TI-2022-08494 CVE-2022-24676 · GHSA-pc42-94f8-mv6f

MEDIUM 41

update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01492 Published 2022-02-08 No fix listed CWE-434

TI-2019-07940 CVE-2019-10644 · GHSA-hcmw-q36h-vq4f

LOW 39

An issue was discovered in HYBBS 2.2.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00655 Published 2019-03-30 No fix listed CWE-352

TI-2018-10400 CVE-2018-14499 · GHSA-c357-8h3r-2h9v

LOW 29

An issue was found in HYBBS through 2016-03-08.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00793 Published 2019-03-07 No fix listed CWE-79