Hyphp

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Hyphp records in CISA KEV

No Hyphp vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Hybbs2 · all components

TI-2022-08495 CVE-2022-24677 · GHSA-m7x8-hcqx-553q

MEDIUM 47

Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02493 Published 2022-02-08 No fix listed

TI-2022-08494 CVE-2022-24676 · GHSA-pc42-94f8-mv6f

MEDIUM 41

update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01492 Published 2022-02-08 No fix listed CWE-434