Hyphp: Security Vulnerabilities
update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.
CVSS Score
8.8
EPSS Score
0.004
Published
2022-02-09
Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php.
CVSS Score
9.8
EPSS Score
0.022
Published
2022-02-09
An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-03-30
An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-03-07