Vulnerabilities

TI-2022-08494 CVE-2022-24676 · GHSA-pc42-94f8-mv6f

update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.

MEDIUM 41

update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01492 Published 2022-02-08 No fix listed CWE-434

TI-2022-08495 CVE-2022-24677 · GHSA-m7x8-hcqx-553q

MEDIUM 47

Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02493 Published 2022-02-08 No fix listed

TI-2019-07940 CVE-2019-10644 · GHSA-hcmw-q36h-vq4f

LOW 39

An issue was discovered in HYBBS 2.2.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00655 Published 2019-03-30 No fix listed CWE-352

TI-2018-10400 CVE-2018-14499 · GHSA-c357-8h3r-2h9v

LOW 29

An issue was found in HYBBS through 2016-03-08.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00793 Published 2019-03-07 No fix listed CWE-79